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Abstract 

One formidable difficulty in quantum communication and computation is to 
protect information-carrying quantum states against undesired interactions 
with the environment. In past years, many good quantum error-correcting 
codes had been derived as binary stabilizer codes. Fault-tolerant quantum 
computation prompted the study of nonbinary quantum codes, but the the- 
ory of such codes is not as advanced as that of binary quantum codes. This 
paper describes the basic theory of stabilizer codes over finite fields. The 
relation between stabilizer codes and general quantum codes is clarified by 
introducing a Galois theory for these objects. A characterization of nonbi- 
nary stabilizer codes over Fq in terms of classical codes over ¥^2 is provided 
that generalizes the well-known notion of additive codes over F4 of the bi- 
nary case. This paper derives lower and upper bounds on the minimum 
distance of stabilizer codes, gives several code constructions, and derives 
numerous families of stabilizer codes, including quantum Hamming codes, 
quadratic residue codes, quantum Melas codes, quantum BCH codes, and 
quantum character codes. The puncturing theory by Rains is generalized to 
additive codes that are not necessarily pure. Bounds on the maximal length 
of maximum distance separable stabilizer codes are given. A discussion of 
open problems concludes this paper. 

This paper is dedicated to the memory of Professor Thomas Beth 



1 Introduction 

Reliable quantum information processing requires mechanisms to reduce the 
effects of environmental and operational noise. Fortunately, it is possible to 
alleviate the detrimental effects of decoherence by employing quantum error- 
correcting codes, so that one can engineer more reliable quantum communi- 
cation schemes and quantum computers. 
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^Contact author, e-mail: klappi at cs.tamu.edu 



1 



The most widely studied class of quantum error-correcting codes are 
binary stabilizer codes, see [7,8,14,18,20,27-30,33,37,39,40,42-46,48,54, 
55,57,68,80,89,91-94,96,99] and, in particular, the seminal works [19,38]. 
An appealing aspect of binary stabilizer codes is that there exist links to 
classical coding theory which ease the construction of good codes. More 
recently, some results were generalized to the case of nonbinary stabilizer 
codes [1,3,4,16,23,24,34,35,41,47,49,56,64,70,79,83,85,86], but the theory 
is not nearly as complete as in the binary case. 

We recall the basic principles of nonbinary stabilizer codes over finite 
fields in the next section. In Section 3, we introduce a Galois theory for 
quantum error-correcting codes. The original theory developed by Evariste 
Galois relates field extensions with groups. Oystein Ore distilled the essence 
of this correspondence and derived a significantly more general theory for 
pairs of lattices [74]. We use this framework and set up a Galois correspon- 
dence between quantum error-correcting codes and groups. This theory 
shows how some properties of general quantum codes, such as bounds on 
the minimum distance, can be deduced from results about stabilizer codes. 

In Section 4, we recall that stabilizer codes over a finite field Fq corre- 
spond to additive codes over Fq that are self-orthogonal with respect to a 
trace-symplectic form [4]. We also establish the correspondence to additive 
codes over Fq2 that are self-orthogonal with respect to a trace-alternating 
form; remarkably, this basic construction had been missing in the literature, 
in spite of the fact that it is a generalization of the famous F4-codes [19]. 

The MacWilliams relations for weight enumerators of stabilizer codes 
are particularly easy to prove, as we show in Section 5. We then derive 
in Section 6 upper and lower bounds on the minimum distance of the best 
possible stabilizer codes. In Section 7, we recall basic facts about cyclic 
stabilizer codes. 

After laying the foundation in the first seven sections, we are able to 
construct numerous code families in the subsequent sections. In Section 8, 
we derive quantum Hamming codes; in Section 9, quantum quadratic residue 
codes; in Section 10, quantum Melas codes; and in Section 11, quantum BCH 
codes. In the latter case, we show that it is possible to extend quantum BCH 
codes. In Section 12, we generalize the known results about puncturing 
pure linear stabilizer codes to arbitrary additive codes, and we illustrate 
this theory by puncturing quantum BCH codes. 

We show in Section 13 that stabilizer codes over Fq attaining the quan- 
tum Singleton bound cannot exceed a length of + 1, except in a few 
sporadic cases, assuming that the classical MDS conjecture holds. We give 
slightly weaker bounds for the length of MDS stabilizer codes without such 
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an assumption. In Section 14, we derive an interesting class of quantum 
character codes. We give numerous code constructions in Section 15, and 
conclude the paper with a discussion of open questions. 

We tried to keep the prerequisites to a minimum, so that readers from 
the coding theory community as weh as from the quantum computing com- 
munity can benefit. Apart from the basics of quantum computing, we rec- 
ommend [19] and [40] for background on binary stabihzer codes, in addition 
to books on classical coding theory, such as [52] and [67]. The general the- 
ory of quantum codes is discussed in [61], and we assume that the reader 
is familiar with the notion of a detectable error, as introduced there. In 
general, we will omit proofs for results from our companion papers [2,84], 
but otherwise we tried to make this paper reasonably self-contained. 

Notations. We assume throughout this paper that Fg denotes a finite 
field of characteristic p; in particular, q always denotes a power of a prime 
p. The trace function from Fg™ to Fg is defined as trg,n/g{x) = X^JIITq^ rc'' ; 
we may omit the subscripts if Fg is the prime field. If G is a group, then 
we denote by Z{G) the center of this group. If /S C G, then we denote by 
Cg{S) the centralizer of S in G. We write H < G to express the fact that 
H is a subgroup of G. The trace Tr(M) of a square matrix M is the sum of 
the diagonal elements of M. 

2 Stabilizer Codes 

Let q a power of a prime p, and let C be a (/-dimensional complex vector 
space representing the states of a quantum mechanical system. We denote by 
\x) the vectors of a distinguished orthonormal basis of C^, where the labels 
X range over the elements of a finite field with q elements. A quantum 
error-correcting code Q is a i^-dimensional subspace of C^" = C^®- • -i^C. 

We need to select an appropriate error model so that we can measure 
the performance of a code. We simplify matters by choosing a basis £n of 
the vector space of complex q"^ x matrices to represent a discrete set of 
errors. A stabilizer code is defined as the joint eigenspace of a subset of £n, 
so the error operators play a crucial role. 

Error Bases. Let a and b be elements of the finite field F^. We define the 
unitary operators X{a) and Z{b) on C by 

X{a)\x) = \x + a), Z{b)\x) = u^'^^'^^lx), 
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where tr denotes the trace operation from the extension field to the prime 
field Fp, and uj = exp{2TTi/p) is a primitive pth root of unity. 

We form the set £ = {X{a)Z{b) \a,b £ Fq} of error operators. The set £ 
has some interesting properties, namely (a) it contains the identity matrix, 
(b) the product of two matrices in f is a scalar multiple of another element 
in £, and (c) the trace Tt{A^B) = for distinct elements A,B of £. A 
finite set of q'^ unitary matrices that satisfy the properties (a), (b), and (c) 
is called a nice error basis, see [60]. 

The set £ of error operators forms a basis of the set of complex q x q 
matrices thanks to property (c). We include a proof that £ is a nice error 
basis, because parts of our argument will be of independent interest in the 
subsequent sections. 

Lemma 1. The set £ = {X(a)Z{b) \a,b £ Fq} is a nice error basis on C^. 

Proof. The matrix X{0)Z{0) is the identity matrix, so property (a) holds. 
We have uj^'''-'"'^ X{a)Z(b) = Z(b)X{a), which implies that the product of 
two error operators is given by 

X{a)Z{b) X{a')Z{b') = lo''^^"'^ X{a + a')Z{b + b'). (1) 

This is a scalar multiple of an operator in £, hence property (b) holds. 

Suppose that the error operators are of the form A = X{a)Z(b) and 
B = X{a)Z{b') for some a, b, b' G F,. Then 

TriA^B) = Tr(Z(6' - 6)) = ^ ^tr({b'-b)x) ^ 

The map x i— > is an additive character of Fq. The sum of all 

character values is unless the character is trivial; thus, Tt{A^B) = when 
b'^b. 

On the other hand, A = X{a)Z{b) and B = X{a')Z{b') are two error 
operators satisfying a ^ a', then the diagonal elements of the matrix B = 
Z{—b)X{a' — a)Z{b') are 0, which implies Tr(Al'i?) = 0. Thus, whenever A 
and B are distinct element of then Th:{A^ B) = 0, which proves (c). □ 

Example 2. We give an explicit construction of a nice error basis with 
g = 4 levels. The finite field F4 consists of the elements F4 = {0, l,a,a}. 
We denote the four standard basis vectors of the complex vector space 
by |0), |a), and \a). Let I2 denote the 2x2 identity matrix, cFx = {Iq), 
and az = ( _i ) • Then 

X(O) = l2 0l2, X(l) = l2®o-^, X(a)=a^(g)l2, X(a) = cj^ a^, 
Z(O)=l2 0l2, ^(l)=CT2 0l2, Z(a) =0-2 0-^, Z{a)=l2®(Tz- 
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We see that this nice error basis is obtained by tensoring the Pauh basis, a 
nice error basis on C^. The next lemma shows that this is a general design 
principle for nice error bases. 

Lemma 3. If £i and £2 o-re nice error bases, then 

£ = {Ei^E2\Ei£ £i,E2 G £2} 
is a nice error basis as well. 

The proof of this simple observation follows directly from the definitions. 

Let a = (ai, . . . ,an) £ F^. We write X{a) = X{ai) • • • X{an) and 
Z{a) = Z[ai) (8) • • • (8> Z{an) for the tensor products of n error operators. 
Our aim was to provide an error model that conveniently represents errors 
acting locally on one quantum system. Using the new notations, we can 
easily formulate this model. 

Corollary 4. The set £n = {X(a)Z(b) | a, b G F^} is a nice error basis on 
the complex vector space C^". 

Remark. Several authors have used an error basis that is equivalent to 
our definition of £n, see [4,35,56,70]. We have defined the operator Z{b) 
in a slightly different way, so that the properties relevant for the design of 
stabilizer codes become more transparent. In particular, we can avoid an 
intermediate step that requires tensoring p x p-matrices, and that allows us 
to obtain the trace-symplectic form directly, see Lemma [3 

Stabilizer Codes. Let G„ denote the group generated by the matrices of 
the nice error basis It follows from equation Q that 

Gn = {c^^X(a)Z(b) I a, b G F'J, c G Fp}. 

Note that G„ is a finite group of order pq'^^. We call G„ the error group 
associated with the nice error basis £n. 

A stabilizer code Q is a non-zero subspace of C^" that satisfies 

Q= f]{v eC^" \ Ev = v} (2) 

Ees 

for some subgroup S of Gn. In other words, Q is the joint eigenspace to the 
eigenvalue 1 of a subgroup S of the error group G„. 

Remark. A crucial property of a stabilizer code is that it contains all joint 
eigenvectors of S with eigenvalue 1, as equation indicates. If the code is 
smaller and does not exhaust all joint eigenvectors of S with eigenvalue 1, 
then it is not a stabilizer code for S. 
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Minimum Distance. The error correction and detection capabilities of 
a quantum error-correcting code Q are the most crucial aspects of the code. 
Recall that a quantum code Q is able to detect an error E in the unitary 
group U{q^) if and only if the condition {ci\E\c2) = ^e{ci\c2) holds for all 
ci,C2 G Q, see [61]. 

It turns out that a stabilizer code Q with stabilizer S can detect all errors 
in Gn that are scalar multiples of elements in 5 or that do not commute with 
some element of 5, see Lemma ITTl In particular, an error in Gn that is not 
detectable has to commute with all elements of the stabilizer. Commuting 
elements in G„ are characterized as follows: 

Lemma 5. Two elements E = u;'=X(a)Z(b) and E' = uj"' X{a!)Z{h') of the 
error group Gn satisfy the relation 

EE' = cj*''^^-^'-^'-^)^'^. 

In particular, the elements E and E' commute if and only if the trace sym- 
plectic form tr(b • a' — b' • a) vanishes. 

Proof It follows from equation ((TJ) that EE' = uj^'^^-"^'^ X{a + a')^(b + b') 
and E'E = tj*^('^'-'^)X(a + a')^(b + b'). Therefore, multiplying E'E with 
the scalar m^'^^^-^' yields EE', as claimed. □ 

We define the symplectic weight swt of a vector (a|b) in F^" as 

swt((a|b)) = |{A:|(afc,fefc)/(0,0)}|. 

The weight w{E) of an element E = LO^X{a)Z{h) in the error group G„ 
is defined to be the number of nonidentity tensor components, w{E) = 
swt((a|b)). In particular, the weight of a scalar multiple of the identity 
matrix is by definition zero. 

A quantum code Q has minimum distance d if and only if it can detect all 
errors in G„ of weight less than d, but cannot detect some error of weight d. 
We say that Q is an {{n, K,d))q code if and only if Q is a K-dimensional 
subspace of C" that has minimum distance d. An {{n,q^,d))q code is also 
called an [[n, k, d]]q code. We remark that some authors are more restrictive 
and use the bracket notation just to stabilizer codes. 

We say that a quantum code Q is pure to t if and only if its stabilizer 
group S does not contain non-scalar matrices of weight less than t. A quan- 
tum code is called pure if and only if it is pure to its minimum distance. As 
in [19], we will always assume that an [[n,0,(i]]g code has to be pure. 

Remark, (a) If a quantum error-correcting code can detect a set D of 
errors, then it can detect all errors in the linear span of D. (b) A code of 
minimum distance d can correct all errors of weight t = [{d — l)/2j or less. 
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3 Galois Connection 

We want to clarify the relation between stabilizer codes and more general 
quantum codes before we proceed further. Let us denote by Q the set of all 
subspaces of . The set Q is partially ordered by the inclusion relation. 
Any two elements of Q have a least upper bound and a greatest lower bound 
with respect to the inclusion relation, namely 

sup{Q,Q'} = Q + Q' and mi{Q,Q'} = Q n Q' . 

Therefore, Q is a complete (order) lattice. An element of this lattice is a 
quantum error-correcting code or is equal to the vector space {0}. 

Let G denote the lattice of subgroups of the error group G„. We will 
introduce two order-reversing maps between Q and Q that establish a Galois 
connection. We will see that stabilizer codes are distinguished elements of Q 
that remain the same when mapped to the lattice G and back. 

Let us define a map Fix from the lattice Q of subgroups to the lattice Q of 
subspaces that associates to a group S its joint eigenspace with eigenvalue 1, 

Fix(5) = f]{v£ Qi" \Ev = v}. (3) 

Ees 

We define for the reverse direction a map Stab from the lattice Q to the 
lattice G that associates to a quantum code Q its stabilizer group Stab((5), 

Stab(Q) = {E e Gn\Ev = v for all v e Q}. (4) 

We obtain four direct consequences of the definitions ^ and (jlj: 

Gl. If Qi C Q2 are subspaces of C", then Stab((52) < Stab((5i). 

G2. If Si < S2 are subgroups of then Fix(S'2) < Fix(S'i). 

G3. A subspace Q of satisfies Q C Fix(Stab(Q)). 

G4. A subgroup S of G„ satisfies S < Stab(Fix(5)). 

The first two properties establish that Fix and Stab are order-reversing 
maps. The extension properties G3 and G4 establish that Fix and Stab 
form a Galois connection, see [17, page 56]. The general theory of Galois 
connections establishes, among other results, that 

Fix(S) = Fix(Stab(Fix(5))) and Stab(g) = Stab(Fix(Stab(Q))) 
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holds for all S in Q and all Q in Q. 

A subspace Q of the vector space satisfying G3 with equality is 
called a closed subspace, and a subgroup S of the error group G„ satisfying 
G4 with equality is called a closed subgroup. We record the main result of 
abstract Galois theory in the following proposition. 

Proposition 6. The closed subspaces of the vector space C^" form a com- 
plete sublattice Qc of the lattice Q. The closed subgroups of Gn form a 
complete sublattice Qc of the lattice Q that is dual isomorphic to the lat- 
tice Qc. 

Proof. This result holds for any Galois connection, see Theorem 10 in the 
book by Birkhoff [17, page 56]. □ 

We need to characterize the closed subspaces and subgroups to make 
this proposition useful. We begin with the closed subspaces because this is 
easier. 

Lemma 7. A closed subspace is a stabilizer code or is 0- dimensional. 
Proof. By definition, a closed subspace Q satisfies 

Q = Fix(Stab(Q)) = G | = ^;}, 

£;eStab(Q) 

hence is a stabilizer code or {0}. □ 

Lemma 8. If Q is a nonzero subspace of C", then its stabilizer S = 
Stab(Q) is an abelian group satisfying S H Z{Gn) = {1}- 

Proof. Suppose that E and E' are non-commuting elements of S = Stab((5). 
By Lemma 1^1 we have EE' = uj^E'E for some lo'' ^ 1. A nonzero vector 
V in Q would have to satisfy v = EE'v = lo^E'Ev = u^v, contradiction. 
Therefore, S is an abelian group. The stabilizer cannot contain any element 
LO^'l, unless A; = 0, which proves the second assertion. □ 

Lemma 9. Suppose that S is the stabilizer of a vector space Q. An orthog- 
onal projector onto the joint eigenspace Fix{S) is given by 
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Proof. A vector v in Fix(S') satisfies Pv = v, hence Fix(S') is contained 
in the image of P. Conversely, note that EP = P holds for all E in S, 
hence any vector in the image of P is an eigenvector with eigenvalue 1 of 
all error operators E in S. Therefore, Fix(S') = image P. The operator P is 
idempotent, because 



holds. The inverse E^ of E is contained in the group S, hence P^ = P. 
Therefore, P is an orthogonal projector onto Fix(S'). □ 

Remark. If 5 is a nonabelian subgroup of the group G„, then it nec- 
essarily contains the center Z{Gn) of G„; it follows that P is equal to the 
all-zero matrix. Note that the image of P has dimension Tr(P) = q'^/\S\. 

Lemma 10. A subgroup S of Gn is closed if and only if S is an abelian 
subgroup that satisfies S r\ Z{Gn) = {1} or if S is equal to Gn- 

Proof. Suppose that 5 is a closed subgroup of G.„. The vector space Q = 
Fix(S') is, by definition, either a stabilizer code or a 0-dimensional vector 
space. We have Stab({0}) = G„. Furthermore, if Q / {0}, then Stab(Q) = 
S is an abelian group satisfying S n Z{Gn) = {1}, thanks to Lemma |H1 

Conversely, suppose that S is an abelian subgroup of Gn such that S 
trivially intersects the center Z{Gn)- Let S* = Stab(Fix(5)). We have 
Fix(S'*) = Fix(Stab(Fix(S'))) = Fix(S'), because this holds for any pair of 
maps that form a Galois connection. It follows from Lemma 121 that 



Since S < S*, this shows that S = S* = Stab(Fix(5)); hence, S is a closed 
subgroup of Gn- We note that Fix(G„) = {0}, so that Gn = Stab(Fix(Gn)) 



The stabilizer codes are easier to study than arbitrary quantum codes, 
as we will see in the subsequent sections. If we know the error correction 
capabilities of stabilizer codes, then we get sometimes a lower bound on the 
minimum distance of an arbitrary code by the following simple observation: 

Fact. An arbitrary quantum code Q is contained in the larger stabilizer 
code Q* = Fix(Stab(Q)). If an error E can be detected by Q*, then it can 
be detected by Q as well. Therefore, if the stabilizer code Q* has minimum 
distance d, then the quantum code Q has at least minimum distance d. 





is closed. 



□ 
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4 Additive Codes 



The previous section explored the relation between stabilizer codes and other 
quantum codes. We show next how stabilizer codes are related to classical 
codes (namely, additive codes over Fg or over Fg2 ) . The classical codes allow 
us to characterize the errors in G„ that are detectable by the stabilizer code. 
If 5 is a subgroup of G„, then Cg„{S) denotes centralizer of S in Gn, 

CgSS) ={E eGn\EF = FE for ah F e S}, 

and SZ{Gn) denotes the group generated by 5 and the center Z{Gn)- We 
first recall the following characterization of detectable errors (see also [4]; 
the interested reader can find a more general approach in [58,59]). 

Lemma 11. Suppose that S < Gn is the stabilizer group of a stabilizer 
code Q of dimension dimQ > 1. An error E in Gn is detectable by the 
quantum code Q if and only if either E is an element of SZ{Gn) or E does 
not belong to the centralizer Cg^ (S) . 

Proof. An element E in SZ[Gn) is a scalar multiple of a stabilizer; thus, it 
acts by multiplication with a scalar \e onQ. It follows that £" is a detectable 
error. 

Suppose now that E is an error in Gn that does not commute with some 
element F of the stabilizer S; it follows that EE = XFE for some complex 
number A 7^ 1, see Lemma El All vectors u and v in Q satisfy the condition 

{u\E\v) = {u\EF\v) = X{u\FE\v) = X{u\E\v); (5) 

hence, {u\E\v) = 0. It follows that the error E is detectable. 

Finally, suppose that E is an element of CG^iS) \ SZ{Gn)- Seeking a 
contradiction, we assume that E is detectable; this implies that there exists 
a complex scalar A^; such that Ev = Xev for all v 'm.Q. The scalar A^ cannot 
be zero, because E commutes with the elements of S so EP = PEP = XeP 
and clearly EP ^ 0. Let S* denote the abelian group generated by X'j^E 
and by the elements of S. The joint eigenspace of S* with eigenvalue 1 has 
dimension /\S*\ < dimQ = (f^ /\S\. This implies that not all vectors in Q 
remain invariant under X'j^^E, in contradiction to the detectability of E. □ 

Corollary 12. If a stabilizer code Q has minimum distance d and is pure 
to t, then all errors E G Gn with 1 < wt(£') < min{t, d} satisfy {u\E\v) = 
for all u and v in Q. 
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Proof. By assumption, the weight of E is less than the minimum distance, 
so the error is detectable. However, E is not an element of Z{Gn)S, since 
the code is pure to t > wt{E). Therefore, E does not belong to Cg„{S), 
and the claim follows from equation ©. □ 

Codes over Fg. Lemma ^2 characterizes the error detection capabilities 
of a stabilizer code with stabilizer group S in terms of the groups SZ{Gn) 
and CcniS)- The phase information of an element in Gn is not relevant for 
questions concerning the detectability, since an element E of Gn is detectable 
if and only if toE is detectable. Thus, if we associate with an element 
a;^X(a)Z(b) of Gn an element (a|b) of F^", then the group SZ{Gn) is 
mapped to the additive code 

C = {(a|b) I oj'X{s.)Z{h) G SZ{Gn)] = SZ{Gn)/Z{Gn). 

To describe the image of the centralizer, we need the notion of a trace- 
symplectic form of two vectors (a|b) and (a'|b') in F^", 

((a|b)|(a'|b')). = N/p(b-a'-b'-a). 

The centralizer Gg„{S) contains all elements of Gn that commute with 
each element of S; thus, by Lemma |S1 Gg„{S) is mapped onto the trace- 
symplectic dual code C"*-" of the code C, 

G^^ = {(a|b) |^^X(a)Z(b) G Cg„(5)}. 

The connection between these classical codes and the stabilizer code is made 
precise in the next theorem. This theorem is essentially contained in [4] and 
generalizes the well-known connection to symplectic codes [19, 38] of the 
binary case. 

Theorem 13. An ((n, K, d))q stabilizer code exists if and only if there exists 
an additive code C < F^" of size \G\ = /K such that G < C"*-" and 
swt(C^- \ G) = d if K > I (and swt(C-L=) = difK = l). 

Proof. Suppose that an {{n,K,d))q stabilizer code Q exists. This implies 
that there exists a closed subgroup S of G„ of order |5| = q^/K such 
that Q = Fix(5). The group S is abelian and satisfies S Ci Z{Gn) = 1, 
by Lemma Cni The quotient G ^ SZ{Gn)/Z{G is an additive subgroup 
of F2" such that \G\ = \S\ = q^/K. We have G^' = Cg„(5)/^(G„) by 
Lemma[SJ Since S is an abelian group, SZ{Gn) < Gg„{S), hence G < G^°. 
Recall that the weight of an element uj'^X{a)Z{h) in G„ is equal to swt(a|b). 
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If K = 1, then Q is a pure quantum code, thus wt(CG„('S')) = swt(C = d. 
li K > 1, then the elements of Cg„{S) \ SZ{Gn) have at least weight d by 
Lemma [TTl so that swt(C^'' \C) = d. 

Conversely, suppose that C is an additive subcode of F^" such that 
Id = q'^/K, C <C^% and swt(C^= \C) = diiK>l (and swt(C^O = d 
if K = 1). Let 

N = {w^X(a)Z(b) I c G Fp and (a|b) G C}. 

Notice that is an abelian normal subgroup of G„, because it is the pre- 
image of C = N/Z[Gn)- Choose a character x of such that x('^'^l) = 
Then 

' ' E£N 

is an orthogonal projector onto a vector space Q, because P/v is an idempo- 
tent in the group ring C[G„], see [58, Theorem 1]. We have 

dimQ = TrP^v = \Z{GnW/\N\ = /\C\ = K. 

Each coset of N modulo Z[Gn) contains exactly one matrix E such that 
Ev = V for all v in Q. Set S = {E G N \ Ev = v for all v G Q}. Then S is 
an abelian subgroup of G„ of order l^l = ICj = q"'/K. We have Q = Fix(S'), 
because Q is clearly a subspace of Fix(5), but dimQ = q'^/\S\ = K. An 
element oj'^X{a)Z{h) in Gg„{S) \ SZ{Gn) cannot have weight less than d, 
because this would imply that (a|b) G C"*-' \ G has weight less than d, which 
is impossible. By the same token, \i K = 1, then all nonidentity elements 
of the centralizer Gg„{S) must have weight d or higher. Therefore, Q is an 
{{n,K,d))g stabilizer code. □ 

Codes over Fg2 . A drawback of the codes in the previous paragraph is 
that the symplectic weight is somewhat unusual. In the binary case, refer- 
ence [19] provided a remedy by relating binary stabilizer codes to additive 
codes over F4, allowing the use of the familiar Hamming weight. Some- 
what surprisingly, the corresponding concept was not completely general- 
ized to F^2, although [56,70] and [79] paved the way to our approach. After 
circulating a first version of this manuscript, Gottesman drew our attention 
to another interesting approach that was initiated by Barnum, see [12,13], 
where a sufficient condition for the existence of stabilizer codes is established 
using a symplectic form. 
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Let {P, jS*^) denote a normal basis of Fg2 over Fg. We define a trace- 
alternating form of two vectors v and w in F^a by 

{v\w)a = tr,/p _ p2 ) ■ (6) 

We note that the argument of the trace is invariant under the Galois auto- 
morphism X I— > x'', so it is indeed an element of Fg, which shows that © is 
well-defined. 

The trace-alternating form is bi-additive, that is, {u + v\w)a = {u\w)a + 
{v\'w)a and {u\v + w)a = {u\v)a + {u\'w)a holds for all u,v,w G F^j- It is Fp- 
linear, but not Fg-linear unless q = p- And it is alternating in the sense that 
{u\u)a = holds for all u G F^j- We write uJ-aW if and only if {u\w)a = 
holds. 

We define a bijective map <j) that takes an element (a|b) of the vector 
space Fg" to a vector in Fg2 by setting (j){{a\h)) = /3a + P'^h. The map cp 
is isometric in the sense that the symplectic weight of (a|b) is equal to the 
Hamming weight of 0((a|b)). 

Lemma 14. Suppose that c and d are two vector of F^". Then 

{C\d)s = (0(c)|0(d))a. 

In particular, c and d are orthogonal with respect to the trace- symplectic 
form if and only if (j){c) and 4>{d) are orthogonal with respect to the trace- 
alternating form. 

Proof. Let c = (a|b) and d = (a'|b'). We calculate 

<^(c) . (j){dy = pi+^ a • a' + /32 a • b' + b • a' + /J^+i b • b' 
^{cy ■ cp{d) = a • a' + a • b' + b . a' + b • b' 

Therefore, the trace-alternating form of (f)[c) and (j){d) is given by 

{<t){c)\m)a = tr,/p (^ ^^ ' ^2g_^2 J = ^"^l/P^^ " ^ " ^ " ^ 0, 

which is precisely the trace-symplectic form (c| (i)^. □ 

Theorem 15. An ((n, d))q stabilizer code exists if and only if there exists 
an additive subcode D of F^j of cardinality \D\ = q"' /K such that D < D^°- 
and wt(D-L'' \D) = difK>l (and ^t{D^'') = difK = l). 
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Proof. Theorem 1131 shows that an {{n, K,d))q stabihzer code exists if and 
only if there exists a code C < F^" with |C| = q'^/K, C < and 
swt(C^'' \ C) = dii K > I (and swi{C^') = diiK = 1). We obtain the 
statement of the theorem by applying the isometry (j). □ 

We obtain the following convenient condition for the existence of a sta- 
bilizer code as a direct consequence of the previous theorem. 

Corollary 16. If there exists a classical [n, k]q2 additive code D < Y^i such 
that D < Z)-*-" and d^" = wt(L'^") then there exists an [[n, n — 2k, > d-^'']]q 
stabilizer code that is pure to d^°- . 

Remark. It is not necessary to use a normal basis in the definition of 
the isometry (j) and the trace-alternating form. Alternatively, we could have 
used a polynomial basis (1,7) of F^/Fg. In that case, one can define the 
isometry (f) by (?!>((a|b)) = a + 7b, and a compatible trace-alternating form 

by 



{V \w)a' = tlq/p ^- 



One can check that the statement of Lemma El is satisfied for this choice 
as well. Other variations on this theme are possible. 



Classical codes. Self-orthogonal codes with respect to the trace-alter- 
nating form are not often studied in classical coding theory; more common 
are codes which are self-orthogonal with respect to a euclidean or hermitian 
inner product. We relate these concepts of orthogonality in this paragraph. 

Consider the hermitian inner product x'^ • y of two vectors x and y in 
F"2 ; we write x _L/i y if and only if x'' • y = holds. 

Lemma 17. If two vectors x and y in F^a satisfy x_L/iy, then they satisfy 
x_Lay. In particular, if D < F^a, ihen D^^ < D^" . 

Proof. It follows from x'^ • y = that x • y'^ = holds, whence 

, , , /x-y9 -x9 -yX 

(x|y), = tiq/p _ p2 j = 0' 

as claimed. □ 

Therefore, any self-orthogonal code with respect to the hermitian inner 
product is self-orthogonal with respect to the trace-alternating form. In 
general, the two dual space D-Lh and D-^" are not the same. However, if D 
happens to be F^2-linear, then the two dual spaces coincide. 
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Lemma 18. Suppose that D < F^a is Y qi-linear, then D = Z) 

Proof. Let q = p™, p prime. If D is a A;-dimensional subspace of F^j, then 
D^'^ is a (n — A;)-dimensional subspace of F^2- We can also view D as a 
2mA;-dimensional subspace of Fp"^"^, and Z?-*-" as a 2m{n — /c) -dimensional 
subspace of Fp'"". Since D^'^ C and the cardinalities of Z)^" and D^f^ 
are the same, we can conclude that Z)-*-" = D-^f^. □ 

Corollary 19. If there exists an Fq2-linear [n,k,d]q2 code B such that 
B^'^ < B, then there exists an \[n,2k — n,> d\]q quantum code that is 
pure to d. 

Proof. The hermitian inner product is nondegenerate, so the hermitian dual 
of the code D := B^'^ is B. The [n,n — k]g2 code D is Fg2-linear, so 
D^f^ = Z?-*-" by Lemma ITSl and the claim follows from Corollary 1161 □ 

So it suffices to consider hermitian forms in the case of Fg2 -linear codes. 
We have to use the slightly more cumbersome trace-alternating form in the 
case of additive codes that are not linear over Fq2. 

An elegant and surprisingly simple construction of quantum codes was 
introduced in 1996 by Calderbank and Shor [20] and by Steane [93]. The 
CSS code construction provides perhaps the most direct link to classical 
coding theory. 

Lemma 20 (CSS Code Construction). Let Ci and C2 denote two clas- 
sical linear codes with parameters [n, ki, di\q and [n, k2, c?2]g such that < 
Ci. Then there exists a [[n, k\ + k2 — n, dO^q stabilizer code with minimum dis- 
tance d = m.m{wt{c) I cE (Ci\C^)U(C2\Cj^)} that is pure to minjdi, ^2}. 

Proof. Let C = x C2 < F^". If (ci | C2) and {c[ \ c'2) are two elements 
of C, then we observe that 

tr(c2 • c'l - c'2 • ci) = tr(0 - 0) = 0. 

Therefore, C < C^" . Furthermore, the trace-symplectic dual of C contains 
C2 X Ci, and a dimensionality argument shows that C^^ = C2 x Ci. Since 
the cartesian product x has gi2"-(fci+fc2) elements, the stabilizer code 
has dimension q^i+^i-"- by Theorem 1131 The claim about the minimum 
distance and purity of the code is obvious from the construction. □ 

Corollary 21. If C is a classical linear [n,k,d]q code containing its dual, 
< C, then there exists an [[n,2k — n, > d]]q stabilizer code that is pure 
to d. 
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5 Weight Enumerators 



The Shor-Laflamme weight enumerators of an arbitrary [{n,K))q quantum 
code Q with orthogonal projector P are defined by the polynomials 

n 

^Afz\ With = -^AE^pmEP), 



wt{B)=i 



and 



f^SfV, with B^ = ^ ME^PEP) 



K 

i=0 EeGn 

wt(B) = i 

see [90] for the binary case. The weights Af^ and Bf^ have a nice combi- 
natorial interpretation in the case of stabilizer codes. Indeed, let C < F^" 
denote the additive code associated with the stabilizer code Q. Define the 
symplectic weights of C and C-^" respectively by 

Ai = \{c £ C \ swt{c) = i}\ and Bi = \{c £ C-^" \ swt{c) = 

The next lemma belongs to the folklore of stabilizer codes. 

Lemma 22. The Shor-Laflamme weights of an {{n,K))q stabilizer code Q 
are multiples of the symplectic weights of the associated additive codes C 
and C"*"^; more precisely, 

Af = pAi and Bf' = pBi for < i < n, 

where p is the characteristic of the field Fq . 
Proof. Recall that 

P = 

for the stabilizer group S Q. The trace Ti (EP) is nonzero if and only 
if is an element of SZ{Gn). If G SZ{Gn), then Tt{E^ P)Tr{EP) = 
(g«/|5|)2 = i^2_ Therefore, counts the elements in of weight i, 

so = \Z{Gn)\ x\{c£C \ swt(c) = i}\= pA,. 

If E commutes with all elements in S, then Tv{E^ PEP) = Tv{P'^) = 
Tr(P) = K. HE does not commute with some element of S, then E is 
detectable; more precisely, the proof of Lemma ^2 shows that PEP = OP, 
hence Tt{E^ PEP) = 0. Therefore, B^^ counts the elements in Cg„{S) of 
weight i, hence Bf = \Z{Gn)\ x |{c e C"^" | swt(c) = i}\ = pA'-. □ 
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Shor and Laflamme had been aware of the stabihzer case when they intro- 
duced their weight enumerators, so the combinatorial interpretation of the 
weights does not appear to be a coincidence. Recall that the Shor-Laflamme 
enumerators of arbitrary quantum codes are related by a MacWilliams iden- 
tity, see [77,90]. For stabilizer codes, we can directly relate the symplectic 
weight enumerators of C and C-^" , 



n 



A{z) = A,z' and B{z) = ^ Biz\ 

i=0 i=0 

using a simple argument that is very much in the spirit of Jessie MacWilliams' 
original proof for euclidean dual codes [66]. 

Theorem 23. Let C he an additive subcode of F^" with symplectic weight 
enumerator A{z). Then the symplectic weight enumerator of C^" is given 
by 

Biz) - <^1±SI^M1a ( 

Proof. Let x be a nontrivial additive character of Fp. We define for b E F^" 
a character Xb of the additive group C by substituting the trace-symplectic 
form for the argument of the character x, such that 

Xb{c)=x{{c\b)s)- 

The character Xb is trivial if and only if b is an element of C^" . Therefore, 
we obtain from the orthogonality relations of characters that 



^Xbic) 



\C\ for6GC^^ 
otherwise. 



The following relation for polynomials is an immediate consequence 

E X5(c)z^-*('') = E ^'^'^'^Y^bic) = \C\B{z). (7) 



The right hand side is a multiple of the weight enumerator of the code C^" . 
Let us have a closer look at the inner sum of the left-hand side. If we 
express the vector c S C in the form c = (ci, . . . , Cn|c?i, . . . , dn); and expand 
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the character and its trace-symplectic form, then we obtain 

feeF2" (ai,...,a„|fei,...,b„)eF2" \k=l / 

n 

(ai,...,a„|fei,...,b„)eF|" k=\ 

n 



RecaU that x is a nontrivial character of Fp, hence the map {ak\bk 

F T 

9 



x(tr((ifcaA: — bkCk)) is a nontrivial character of for ah {ck\dk) 7^ (0|0). 
Therefore, we can simphfy the inner sum to 



{afc|6fe)GF2 

It follows that 

E Xfe(c)2'"*^^^ = (1 - + - 

6eF2" 

Substituting this expression into equation 0, we find that 

B(z) = \cr'Yl E X5(c)z^"*(') 

cGCbeF|" 

(1 + (g^ - l)zr ^( l-z N '^'^"^ 
\C\ L.{l + (q2.l), 

(1 + - l)z)" / 1 - ^ 



\C\ \l + ^q2-l),J^ 

which proves the claim. □ 

The coefficient of z^ in — z)^' is given by the Krawtchouk 

polynomial of degree j in the variable x, 



i^,(-) = E(-i)V-ir^Q( 



x\ I n — X 
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Corollary 24. Keeping the notation of the previous theorem, we have 

1 " 

' ' x-=0 

Proof. According to the previous theorem, we have 
Biz) = ^^±K^A^ 



1 " 

' ' x=0 

We obtain the result by comparing the coefficients of on both sides. □ 

The theory of Shor-Laflamme weight enumerators [90] was considerably 
extended by Rains in [77,78,81,82]. 

6 Bounds 

We need some bounds on the achievable minimum distance of a quantum 
stabilizer code. The first theorem yields a bound that is well-suited for 
computer search. 

Theorem 25. If an {{n,K,d))q stabilizer code with K > 1 exists, then there 

■13 



exists a solution to the optimization problem: minimize Aj subject to 



the constraints 

1. Aq = \ and Aj > for all 1 < j < n; 

n 

2. Y,A,=q^^/K; 

j=0 

K " 

3. Bj = — Kj{r)Ar holds for all j in the range < j < n; 

^ r=0 

4. Aj = Bj for all j in < j < d and Aj < Bj for all d < j < n; 

5. (p — 1) divides Aj for all j in the range 1 < j < n. 

Proof. If an {{n,K,d))q stabilizer code exists, then the symplectic weight 
distribution of the associated additive code C satisfies conditions 1) and 2). 
For each nonzero codeword c in C, ac is again in C for all a in F*, so 
5) holds. Corollary |^ shows that 3) holds. Since the quantum code has 
minimum distance d, it follows that 4) holds. □ 
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Remark 26. If we are interested in bounds for Fq2 linear codes, then we can 
replace condition 5) in the previous theorem by — 1 divides Aj. This will 
even help in characteristic 2. 

The next bound is more convenient when one wants to find bounds by 
hand. In particular, any function / satisfying the constraints of the next 
theorem will yield a useful bound on the dimension of a stabilizer code. This 
approach was introduced by Delsarte for classical codes [31]. Binary versions 
of Theorem and Corollary [2H1 were proved by Ashikhmin and Litsyn [5] , 
see also [8]. 

Theorem 27. Let Q be an {{n, K,d))q stabilizer code of dimension K > 1. 
Suppose that S is a nonempty subset of {0, . . . , d — 1} and N = {0, . . . ,n} . 
Let 

n 

f{x) = Y,f,K,{x) 

be a polynomial satisfying the conditions 

'>') /x > for all X in S, and fx > otherwise; 

a) f{x) < for all X in N \ S. 

Then 

K < — max — - — . 

(t fx 

Proof. Suppose that C < Fg" is the additive code associated with the sta- 
bilizer code Q. If we apply Corollarv 1241 to the trace-symplectic dual code 
of the code C, then we obtain 

1 " 

Using this relation, we find that 




Y,Ki{x)Bx 



x=0 



Y^Bx^fiM, 

x=0 i=Q 
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By assumption, f{x) = "^"^q fiKi{x); thus, we can simplify the latter in- 
equality and obtain 

n 

where the last equahty follows from the fact that the stabilizer code has 
minimum distance d, meaning that Ax = Bx holds for all x in the range 
< X < (i. We can conclude that 

\C^'\ < I > Ax fix) 1 / I > fxAx I < max .^^"^^ 



Y,Axf{x)\ I [Y^f^^A 

\x£S J ' \x&S / 



ce5 fx 

which proves the theorem, since 

As an example, we demonstrate that the previous theorem implies the 
quantum Singleton bound. Linear programming yields in general better 
bounds, but for short lengths one can actually find codes meeting the quan- 
tum Singleton bound. 

Corollary 28 (Quantum Singleton Bound). An {{n, K,d))q stabilizer 
code with K > 1 satisfies 

K < g""2d+2^ 

Proof. Let S = {0, . . . ,d — 1}. If we choose the polynomial 



/(.)=,"--^n(i-7) 



j=d 

then f{x) = for all x in {0, . . . ,n}\ S. We can express f{x) in the form 
We can express this polynomial as f{x) = X]"=q fiKi{x), where 

x=0 x=0 ^ / I \ ' / 

Notice that ELo '«'«(')(„"i«) = (r;)?"""". ^"^"^ [631; l^nce, 



n — i\ n 
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We obtain for the fraction r(x) := f{x)/fx the value 

r-(^\ - ^^^^ - „2n-2d+2 ( - ^ \ U U - X 

^ U \n-d+l)/ U-1 

An easy calculation shows that 

r{x) n — X — d + 1 
r{x + 1) d — X — 1 

Seeking a contradiction, we assume that there exists an ((n, K, d))q stabilizer 
code with 2d > n + 2. In this case r{x)/r{x + !)<!, so that r{d — 1) is 
the maximum of the values r(x) with x € {0, . . . ,d — 1}. By Theorem \27\ 
we have K < r{d - = • This yields a contradiction, 

since i^'^'^^^K cannot be less than gi"-2a!+2 ^ ^ for dimension K > 1. 

If 2(i < n + 2, then r{x)/r{x + !)>!, so r(0) = /(0)//o is the largest 
among the values r{x) with x € {0, . . . ,d — 1}. We have r(0) = g2n-2ci+2. 
whence, it follows from Theorem |57| that the dimension K of the code is 
bounded by 

K < g-" max ^ = 

0<x<d fx 

which proves the claim. □ 

The binary version of the quantum Singleton bound was first proved by 
Knill and Laflamme in [61], see also [5,8], and later generalized by Rains 
using weight enumerators in [79]. 

The quantum Hamming bound states that any pure ((n, K, d))q stabilizer 
code satisfies 

L(d~l)/2J 

see [36,38]. Several researchers have tried to find impure stabilizer codes 
that beat the quantum Hamming bound. However, Gottesman has shown 
that impure single and double error-correcting binary quantum codes cannot 
beat the quantum Hamming bound [40] . In the same vein, Theorem 1271 
allows us to derive the Hamming bound for arbitrary stabilizer codes, at 
least when the minimum distance is small. We illustrate the method for 
single error-correcting codes, and note that the same approach works for 
double error-correcting codes as well. 

Corollary 29 (Quantum Hamming Bound). An {{n, K,3))q stabilizer 
code with K > 1 satisfies 

K < q^'/iniq'' - 1) + 1). 
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Proof. Recall that the intersection number p^^- of the Hamming association 
scheme H{n,q^) is the integer p^^ = \{z G Y^2\d{x,z) = i,d{y,z) = j}\, 
where x and y are two vectors in of Hamming distance d{x, y) = k. 
The intersection numbers are related to Krawtchouk polynomials by the 
expression 

n 

see [11]. 

After this preparation, we can proceed to derive the Hamming bound as 
a consequence of Theorem 1271 Let 

1 n 
j,k=0 1=0 

The triangle inequality implies that p^j = if one of the three arguments 
exceeds the sum of the other two; hence, f{x) = for x > 2. The coefficients 
of the Krawtchouk expansion f{x) = Yll=o f-i^ii^) obviously satisfy /j = 
(Ko(^) + Ki{i))'^ > Q. A straightforward calculation gives 

/(O) = q^-{n{q^-l) + l), f, = (n{q^-l) + lf, 

/(I) = /l = {{n-l){q'-l)f, 

f{2) = 2g2-, /2 = ((n-2)(<?2-l)-l)2. 

It follows that 

max{/(0)//o, /(l)//i, f{2)/h} < q'V{n{q' - 1) + 1) 

holds for all n > 5. Using Theorem 1271 we obtain the claim for all n > 5. 
For the lengths n < 5, we obtain the claim from the quantum Singleton 
bound. □ 

One real disadvantage of Theorem is that the number of terms in- 
crease with the minimum distance and this can lead to cumbersome calcu- 
lations. However, one can derive more consequences from Theorem 1271 see, 
for instance, [5, 8, 63, 71] . 

Lower Bounds. We conclude this section by giving the quantum version 
of the classical lower bounds by Gilbert and Varshamov. Basically, a simple 
counting argument is used to establish the existence of stabilizer codes. 

Our first lemma generalizes an idea used by Gottesman in his proof of 
the binary case. 
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Lemma 30. An {{n,K,> d))g stabilizer code with K > 1 exists provided 
that 




holds. 

Proof. Let L denote the multiset 

L = {C^' \ C\C <C^' <Ff' with \C\ = q^'/K}. 

The elements of this multiset correspond to stabilizer codes of dimension K. 
Note that L is nonempty, since there exists a code C of size q'^/K that is 
generated by elements of the form (a|0); the form of the generators ensures 
that C <C^^. 

All nonzero vectors in F^" appear in the same number of sets in L. 
Indeed, the symplectic group Sp(2n, Fq) acts transitively on the set Fq'"\{0}, 
see [50, Proposition 3.2], which means that for any nonzero vectors u and 
V in Fg" there exists r € Sp(2n, Fg) such that v = tu. Therefore, u is 
contained in C'^" \C if and only if v is contained in the element {tC)'^" \ tC 
of L. 

The transitivity argument shows that any nonzero vector in F^" occurs 
in \L\{q^K — q^ /K)/{(f'^ — 1) elements of L. Furthermore, a nonzero vector 
and its Fp -multiples are contained in the exact same sets of L. Thus, if we 
delete all sets from L that contain a nonzero vector with symplectic weight 
less than d, then we remove at most 

E-ZlQil'-iy (q-K-qVK) 
p — 1 g^" — 1 

sets from L. By assumption, this number is less than \L\; hence, there exists 
an {{n,K,> d))q stabilizer code. □ 

The Gilbert- Varshamov bound provides surprisingly good codes, even 
for smaller lengths, when the characteristic of the field is not too small. If 
n = k mod 2, then we can significantly strengthen the bound. 

Lemma 31. If k > 1, n = k mod 2 and 




holds, then there exists an Y ^-i-linear [[n, stabilizer code. 
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Proof. The proof is almost the same as in the previous lemma, except that 
we list only codes C that are linear, meaning that (j){C) is a vector space 
over Fg2. We repeat the previous argument with the multiset 

L = {C^= \C\C <C^^ < F^, \C\ = (t){C) is Fg2-linear }. 

Note that each set C-^" \ C in L contains now all F^2-™ultiples of a nonzero 
vector, not just the F^ -multiples, which proves the statement. □ 

Feng and Ma have recently shown that one can extend the previous result 
to even prove the existence of pure stabilizer codes, but much more delicate 
counting arguments are needed in that case, see [36]. We are not aware of 
short proofs for this stronger result. 

The previous lemma allows us to derive good quantum codes, especially 
for larger alphabets. We illustrate this fact by proving the existence of MDS 
stabilizer codes, see Section^] for more details on such codes. 

Corollary 32. //2 < d < \n/2] and — 1 > (^), then there exists a linear 
[[n, n — 2d + 2, d]]q stabilizer code. 

Proof. The assumption d < [n/2] implies that (") < (2) < • • • < (^'), so 
the maximum value of these binomial coefficients is at most — 1. Let 
k = n— 2d+2. It follows from the assumption that A; > 1 and n = k mod 2. 
It remains to show that @ holds. For the choice k = n — 2d + 2, the left 
hand side of Q equals 



j = l j = l 

/2n-2d+2 _ „2d-2\ il'^ ~ ~ {'f' 



We claim that the latter term is less than g^" - 1. To prove this, it suffices 
to show that 

^2n-2d+2 V/ ~ ^) ~ K'd ~ ^) ^ ^2n |--[^g-j 



q^-2 



holds. The latter inequality is equivalent to {q^ — lY < q"^^ — 2q^'^ + q^ — I, 
and it is not hard to see that this inequality holds. Indeed, note that 

= {{e - 1) + 1)'^ = (g^ - 1)-^ + E (^) - ly • 
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Recall that (^) = (^ij) + C^f); hence, 

^|(G:;)-Cr)'<'^->'- 

a(j): = 

We have a{j) = —a{d — j) for < j < d — 1, and a(j) > for j > d/2. 
This shows that all negative terms get canceled by larger positive terms and 
we can conclude that q'^'^ — 2q^'^~'^ — {q^ — lY > for d > 2; this implies 
inequality (|inj) and consequently shows that Q holds. □ 

Example 33. Recall that there does not exist a [[7, 1,4]]2 code, see [19]. 
In contrast, the existence of a [[7, 1,4]]^ code for all prime powers q > 7 
is guaranteed by the preceding corollary. It also shows that there exist 
[[6, 2,3]]5 for all prime powers q > 5 and [[7, 3,3]]g for all prime powers 
q >7, which slightly generalizes [34]. 



7 Cyclic Codes 

We shall now restrict our attention to linear quantum codes and derive 
several families of quantum codes from classical linear codes. In essence we 
make use of the hermitian and CSS constructions (Lemmas 1191 - [^T|) . Hence, 
we need to look for classical codes that are self-orthogonal with respect to 
the hermitian or the euclidean product or families of nested codes like the 
BCH codes. 

In case of cyclic codes identifying the self-orthogonal codes can be trans- 
lated into equivalent conditions on the generator polynomial of the code or 
its defining set. Let a denote the automorphism of the field Fq2 given by 
(t(x) = x'^. We can define an action of a on the polynomial ring Fg2[x] by 

n n 

h{x) = ^^hkX^ I — > h"{x) = y^o-(/ifc)x^. 
fc=0 fc=0 

Lemma 34. Suppose that B is a classical cyclic [n,k,d\q2 code with gener- 
ator polynomial g{x) and check polynomial h{x) = {x^ — 1) / g{x) . If g{x) di- 
vides a{hQ)''^x^h^ (l/x), then B^^ C B, and there exists an [[n, 2k— n, > d\\q 
stabilizer code that is pure to d. 
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Proof. If h{x) is the check polynomial of B, then h°'{x) is the check polyno- 
mial of (y{B). The generator polynomial of the dual code cj{B)^ = B^*^ is 
given by (t(/io)~^x'^/i'^(1/3;), the normalized reciprocal polynomial of h"{x). 
Therefore, the condition that the polynomial g{x) divides a{hQ)~^x^h" {\/x) 
is equivalent to the condition B^'^ C B. The stabilizer code follows from 
Corollary d □ 

The polynomial x" — 1 of Fg2 [x\ has simple roots if and only if n and q 
are coprime. If the latter condition is satisfied, then there exists a positive 
integer m such that the field Y^im contains a primitive nth root of unity j3. 
In that case, one can describe a cyclic code with generator polynomial g{x) 
in terms of its defining set Z = {k \ gifi'^) = for < A; < n}. The following 
Lemma summarizes various equivalent conditions on self-orthogonal codes 
in terms of the generator polynomial and the defining set Z. 

Lemma 35. Let gcd(n, g^) = 1 and C he a classical cyclic [n,k,d]q2 code 
whose generator polynomial is g{x) and defining set Z . If any of the follow- 
ing equivalent conditions are satisfied 

(i) x"' — 1 = mod g{x)g*{x) where g*{x) = x"'~'^ g" [1 / x) 

(ii) Z C {-qz\z G iV\ Z} 

(Hi) Zr\Z-'i = 0, where Z'^^ = {-qz \ z e Z} 

then C C and there exists an [[n, 2k — n,> d]]q stabilizer code that is 
pure to d. 

Proof. Let h{x) = be the check polynomial of C. Then h"^ (x) = 

a{{x'^ — l)/g{x)) = {x'^ — l)/g°'{x). From Lemma l^ we know that C contains 
its hermitian dual if g(x) divides a{ho)~^x'^h'^ (l/x) viz. g{x)\a{ho)~^{l — 
x^) / {x'^~'^ g" {1 / x)) , which implies — 1 = mod g{x)g*{x) which proves 

(i). 

The generator polynomial g{x) of C is given by g{x) = W^^zi^ ~ Z^^)' 
hence its check polynomial is of the form 

h{x) = {x^-l)/g{x)= n {^-n- 

zeN\z 

Applying the automorphism a yields h"{x) = n^eA^Vzl^ ~ (i^^)- Therefore, 
the generator polynomial of C-'-'' is given by 

h-{Q)-^x^h-{l/x) = /i"(0)-in.eJV\z(l-/?''^) 

in the last equality, we have used the fact that /i°"(0)~^ = Wz&N\zi~ ■ 
By Lemma inn B-^'^ C if and only if the generator polynomial g{x) divides 
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/i'^(O) ^x'^/i'^(l/x). The latter condition is equivalent to the fact that Z 
is a subset of {— | z € N \ and (ii) follows. From (ii) we know 
that C^^ C C if and only if Z C {-qz | z G iV \ Z}. In other words 
Z-1 C N\Z. Hence Z n Z''^ = 0. An [[n, 2k - n,> d\]g stabilizer code 
follows from Corollary 1191 □ 

Cyclic codes that contain their euclidean duals can also be nicely char- 
acterized in terms of their generator polynomials and defining sets. The 
following Lemma is a very straight forward extension of the binary case and 
summarizes some of the known results in the nonbinary case as well, but we 
include it because of its usefulness in constructing cyclic quantum codes. 

Lemma 36. Let C be an [n,k,d]q cyclic code such that gcd{n,q) = 1. Let 
its defining set Z and generator polynomial g{x) he such that any of the 
following equivalent conditions are satisfied 

(i) — 1 = Q mod g{x)g'^{x), where g\x) = x^~^g{l/x); 

(ii) Z C{-z \ ze N\Z}; 

(Hi) Z n Z~^ = where Z~^ = { — z mod n \ z ^ Z}. 

Then C"*- C C and there exists an [[n, 2k — n,> d]]q stabilizer code that is 
pure to d. 

Proof. The check polynomial of C is given by h{x) = (x" — l)/g{x), from 
which we obtain the (un- normalized) generator polynomial of as h^{x) = 
x^h{x-^) = (1 - x'')/{x-^-^g{x-^)) = -(x" - l)/gHx). If C C, then 
^(x) I /i^(x); this means that g{x) divides (x" — l)/5(^(x). In other words 
x" — 1 = mod g{x)g^{x). 

The defining set of C"*" is given by {—z mod n \ z G N \ Z}, where 
= {0, 1, . . . , n - 1}. Thus, C-^ C C implies Z C {-z mod n\ N\Z}. 
Since this means that the inverses of elements in Z are present in iV\ Z, this 
condition can also be written as Z n Z~^ = 0. The existence of quantum 
code [[n,2k — n, > d]]q follows from Corollarv l211 □ 

Although we have considered purely cyclic codes, a larger class of cyclic 
quantum codes can be derived by considering constacyclic or conjucyclic 
codes as in [19], [99]. 

8 Cyclic Hamming Codes 

Binary quantum Hamming codes have been studied by various authors; see 
for instance [19,35,38]. We will now derive stabilizer codes from nonbinary 
classical cyclic Hamming codes. Let m > 1 be an integer such that gcd(g — 



28 



l,m) = 1. A classical cyclic Hamming code Hq{m) has parameters [n,?i — 
m, 3]q with length n = [q^ — 'i)/{q — 1). Let (3 denote a primitive nth root 
of unity in Fgm. The generator polynomial of Hq{m) is given by 

m— 1 

g{x)= n (11) 

1=0 

an element of Fg[2;]. Thus, the code Hq{m) is defined by the cyclotomic 
coset Ci = {g* mod n | z G Z}. 

Lemma 37. The Hamming code Hq2[m) contains its hermitian dual, that 
is, Hq2{m)^'^ < Hq2{m). 

Proof. The statement Hq2{m)^^ < Hq2{m) is equivalent to the fact that the 
cyclotomic coset Ci satisfies Ci C Ni = {—qz mod n \ z G N \Ci}, where 
= {0, . . . ,n - 1} and n = (g^"^ - l)/{q^ - 1). We note that Ci can be 
expressed in the form 

Ci = |(1 - n)q^'' mod n /c G z| = mod n A; G z| , (12) 

where z = q{q^"^~'^ - l)/{q^ — 1). Therefore, the condition Ci C Ni holds if 
and only if C A \ Ci holds, where Cz = {zq^^ mod n\j G Z}. 

Seeking a contradiction, we assume that the two cyclotomic cosets Ci 
and Cz have an element in common, hence are the same. This means that 
there must exist a positive integer k such that q^'^ = q{q^^~'^ — l)/{q^ — 1). 
This implies that q^^~^ divides g2m.-2 _ ^ -which is absurd. Thus, the sets 
Ci and Cz are disjoint, hence Cz ^ A \ Ci, which proves the claim. □ 

Theorem 38. For each integer m > 2 such that gcd(m,g^ — 1) = 1, there 
exists a pure [[n,n — 2m, 3]]q stabilizer code of length n = (g^™ — 1)/ {<1^ ~ 1) • 

Proof. If gcd(m,g^ — 1) = 1, then there exists a classical [n,n — m,3]g2 
Hamming code Hq2{m). By Lemma 1371 we have Hq2{m)^^ < Hq2{m), 
hence there exists a pure [[n,n — 2m, 3]]q stabilizer code by Corollary 1191 
The purity is due to the fact that the Hq2{m)^'^ has minimum distance 
^2m-2 > 3 for m > 2 [52, Theorem 1.8.3]. □ 

These quantum Hamming codes are optimal since they attain the quan- 
tum Hamming bound, see Corollary 1291 A different approach that allows 
construction of noncyclic perfect quantum codes can be found in [16]. It 
is also possible to construct quantum codes from Hamming codes that con- 
tain their euclidean duals, however these codes do not meet the quantum 
Hamming bound. 
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Lemma 39. // gcd(m, q — 1) = 1 and m > 2, then there exists a pure 
[[n,n — 2m,3]]g quantum code, where n = (g™ — l)/(g — 1). 

Proof. The generating polynomial of [n, n — m, 3]q Hamming code, with 
n=(g"^ — l)/(q — l) is given by equation where P is an element of order 
n. The code exists only if gcd{m,q — 1) = 1. By LemmaOHla cyclic code 
contains its dual if x" — 1 = mod g{x)g^ (x), where g^{x) = x"'~'^g{x~^). 
If g{x) is not self-reciprocal then g{x)g\x) divides x" — 1 [98]. Since the 
generating polynomial of the Hamming code is not self-reciprocal, the code 
contains its euclidean dual. By Lemma 1211 we can construct a quantum 
code with the parameters [[n,n — 2m, 3]] g. Once again the purity follows 
due to the fact the duals of Hamming codes are simplex codes with weight 
q"^-^ > 3 [52, Theorem 1.8.3] for m>2. □ 



9 Quadratic Residue Codes 

Another well known family of classical codes are the quadratic residue codes. 
Rains constructed quadratic residue codes for prime alphabet in [79]. In this 
section we will construct two series of quantum codes based on the classical 
quadratic codes for any arbitrary field using elementary methods. 

Theorem 40 (Quadratic Residue Codes). Let n he a prime of the form 
n = 3 mod 4, and let q he a power of a prime that is not divisihle by n. If q 
is a quadratic residue modulo n, then there exists a pure [[n, 1, d]]q stahilizer 
code with minimum distance d satisfying d'^ — d + 1 > n. 

Proof. Let a denote a primitive nth root of unity from some extension field 
of Fg. Let R = {r^ mod n | r G Z such that 1 < r < (n — l)/2} denote the 
set of quadratic residues modulo n. We define the quadratic residue code Cr 
as the cyclic code of length n over Fg that is generated by the polynomial 

r&R 

The code Cr has parameters [n, {n + l)/2, d]q and if n = 3 mod 4, the dual 
code of Cr is given by the cyclic code generated by (x — l)g(x), the even- 
like subcode of Cr. The minimum distance d is bounded by — d + 1 > n, 
see, for instance, [15, pp. 114-119]. Further wt{CR \ Cj^) = wt(CR) = d 
by [52, Theorem 6.6.22]. We can deduce from Corollarv 1211 that there exists 
a pure [[n, (n + 1) — n, (i]]g stabilizer code. □ 
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For example, the prime p = 3 is a quadratic residue modulo n = 23. The 
previous proposition guarantees the existence of a [[23, 1, djja stabilizer code 
with minimum distance d > 6. 

If n is an odd prime of the form n = 1 mod 4, then we can also construct 
quadratic residue codes, but now we need to employ Lemma QUI because Cr 
does not contain its dual. 

Theorem 41. Let n be a prime of the form n = 1 mod 4. Let q be a power 
of a prime that is not divisible by n. If q is a quadratic residue modulo n, 
then there exists a pure [[n,l,d]]q stabilizer code with minimum distance d 
bounded from below by d > \fn. 

Proof. Let a denote a primitive nth root of unity from some extension field 
of Fg. We denote by R denote the set of quadratic residues modulo n and 
by N the set of quadratic non-residues modulo n. 

Let Cr and Cjy denote the cyclic codes of length n that are respectively 
generated by the polynomials qR{x) and gAr(x), where 



Both codes have parameters [n, (n + l)/2, d]q with > n, see [15, pp. 114- 
119]. 

The dual code of Cr is given by the even- like subcode of Cat; in other 
words, is a cyclic code of length n over Fq that is generated by the 
polynomial {x — l)qN{x); in particular, < Cat. Moreover wt(C/j\C]^) = 
wt(CAr \ C^) = d by [52, Theorem 6.6.22]. Therefore, we obtain a pure 
[[n, (n + l)/2 + {n+l)/2- n, d]]q code by Lemma 1^ □ 

10 Quantum Melas Codes 

One of the earliest family of codes that were constructed with a view to 
correcting burst errors are the Melas codes. While not as well known as 
the Hamming codes or the quadratic residue codes, they are nonetheless 
an interesting family of codes. These codes have been well investigated, 
especially in the mathematical community, because of their connections to 
algebraic geometry [62,87,88,97]. See [51] for an interesting read on the 
connections to number theory. 

The Melas code* Mq{m) is a cyclic [n, n— 2m, > 3]g code with n = q^—1. 

*The classical Melas codes are defined over a prime field Fp and have the parameters 
[p"" — IjP™ ~ rn — 1,> 3]p (cf. [95]); here we consider a generalization to arbitrary finite 
fields. 




and 




rG-R 
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The generator polynomial of Mq{m) is given by 



m — l 



g{x)=ll{x-a'^')ix-a-'^'), (13) 

where q is a primitive element in Fgm . Alternatively, the defining set of the 
code is given by Z = Ci U C_i = {±g* mod n | < i < m}. 

Lemma 42. The Melas code Mq2{m) contains its hermitian dual. 

Proof. By Lemma 1351 it suffices to show that Z f] Z^^ = 0. Seeking a 
contradiction, we assume that Z n Z^'^ ^ 0. Since gcd(g^, g^*" — 1) = 1, this 
implies that there must exist some integer i in the range < i < m such 
that g^* = ±(/ mod n, but that is impossible; so Z n Z~'^ = 0. □ 

Lemma 43. If q is even, then the minimum distance of the Melas code 
Mq'2{m) is at least 3. 

Proof. The parity check matrix of ^Aq2{m) is given by 

[la a2 ... ^n-i \ 



This matrix has a rank 2 only if no two columns are scalar multiples of each 
other. Seeking a contradiction, we suppose that 

holds for distinct x and y. This yields a^* = 1, which implies t G {0,n/2}. 
If q is even, then n is odd, and so t cannot equal n/2. If f = 0, then x = y 
contradicting the distinctness of x and y. Therefore, we can conclude that 
H has rank r = 2; thus, the minimum distance is at least 3. □ 

Theorem 44 (Quantum Melas codes). If q is even and n = q^^ — 1, 

there exist quantum Melas codes with parameters [[n, n — 4m, > 3]]g that is 
pure to 3. 

Proof. By Lemma 021 we have JV[^2{m)-^'^- C J\/iq2{m) and by Lemma BHl we 
have the distance > 3. So by Corollary there exists an [[n, n — 4m, > 3]]^ 
quantum code. □ 
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11 Quantum BCH Codes 



In this section we consider a popular family of classical codes, the BCH 
codes, and construct the associated nonbinary quantum stabilizer codes. Bi- 
nary quantum BCH codes were studied in [19,29,45,94]. The CSS construc- 
tion turns out to be especially useful, because BCH codes form a naturally 
nested family of codes. In case of primitive BCH codes over prime fields the 
distance of the dual is lower bounded by the generalized Carlitz-Uchiyama 
bound, and this allows us to derive bounds on the minimum distance of the 
resulting quantum codes. 

Let g be a power of a prime and n a positive integer that is coprime to q. 
Recall that a BCH code C of length n and designed distance 6 over Fg is 
a cyclic code whose defining set Z is given by a union of 5 — 1 subsequent 
cyclotomic cosets, 

b+5~2 

Z = Cx, where Cx = {xq^ mod n | r G Z, r > 0}. 

x=b 

The generator polynomial of the code is of the form 

g{x) = l[{x-n, 
zez 

where P is a primitive n-th root of unity of some extension field of Fg. The 
definition ensures that g{x) generates a cyclic [n,k,d]q code of dimension 
k = n — \Z\ and minimum distance d > 6. If 6 = 1, then the code C is called 
a narrow-sense BCH code, and if n = q"^ — 1 for some m > 1, then the code 
is called primitive. 



Generalized Carlitz-Uchiyama Bound. Our first construction derives 
stabilizer codes from BCH codes over prime fields. We use the Knuth-Iverson 
bracket [statement] in the formulation of the Carlitz-Uchiyama bound that 
evaluates to 1 if statement is true and otherwise. 

Lemma 45 (Generalized Carlitz-Uchiyama Bound). Letp be a prime. 
Let C denote a narrow-sense BCH code of length n = — 1 over Fp, of 
designed distance 5 = 2t-\-l. Then the minimum distance d^ of its euclidean 
dual code is bounded by 

> (l - ^) {p- - [2p-'^ ) . (16) 



33 



Proof. See [95, Theorem 7]; for further background, see [67, page 280]. □ 



Theorem 46. Let p be a prime. Let C be a [p™ — ^,k,> 5]p narrow-sense 
BCH code of designed distance 5 = 2t + I and C* a [p^ — 1, k*,d*]p BCH 
code such that C C C* . Then there exists a [[p™ — 1, k* — k,> mm{d*, d^}]]p 
stabilizer code, where d^ is given by Mb]) . 

Proof. The result follows from applying Lemma 1151 to C and Lemma QUI to 
the codes C and C* . □ 

Remark 47. (i) The Carlitz-Uchiyama bound becomes trivial for larger de- 
sign distances, (ii) In [72, Corollary 2] it was shown that for binary BCH 
codes of design distance d, the lower bound in equation (jlbf) is attained 
when n = 2^°"^ — 1, where a is the smallest integer such that d — 2 | 2"^ + 1 
and b is odd. (iii) For a further tightening of the Carlitz-Uchiyama bound 
see [73, Theorem 2]. 



Primitive BCH codes containing their duals. We can extend result 
of the previous section to BCH codes over finite fields that are not necessarily 
prime. In fact, if we restrict ourselves to smaller designed distances, then 
we can even achieve significantly sharper results. We will just review the 
results and refer the reader to our companion paper [2] for the proofs. 

In the BCH code construction, it is in general not obvious how large the 
cyclotomic cosets will be. However, if the designed distance is small, then 
one can show that the cyclotomic cosets all have maximal size. 

Lemma 48. A narrow-sense, primitive BCH code with design distance 2 < 
S < q\m/2\ _^ I i^^g parameters [q"" - 1, - 1 - m[((5 - 1)(1 - 1/q)] , > 6]q. 

Proof. See [2, Theorem A]; the binary case was already established by 
Steane [94]. □ 

In the case of small designed distances, primitive, narrow-sense BCH 
codes contain their euclidean duals. 

Lemma 49. A narrow-sense, primitive BCH code over contains its eu- 
clidean dual if and only if its design distance 2 < 6 < q'T'^/sI _ ]^ _ ^g, _ 
2)[m odd\, where n = — \ and m>2. 

Proof. See [2, Theorem C]. □ 
A simple consequence is the following theorem: 
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Theorem 50. If C is a narrow-sense primitive BCH code over Fg with 
design distance 2 < 8 < gT^/^T — 1 — [q — 2)[m odd\ and m>2, then there 
exists an [[g"^ — l,q^ — 1 — 2m\[5 — 1)(1 — l/g)], > SWq stabilizer code that 
is pure to 5. 

Proof. If we combine Lemmas UHl and ^\ and apply the CSS construction, 
then we obtain the claim. □ 

One can argue in a similar way for hermitian duals of primitive, narrow- 
sense BCH codes. 

Theorem 51. If C is a narrow-sense primitive BCH code over F^2 with 
design distance 2 < 6 < q"^ — 1, then there exists an [[g^*" — — 1 — 

2m\{5 — 1)(1 — , > S]]q stabilizer code that is pure to 6. 

Proof. See [2] for details. □ 

When m = 1, the BCH codes are the same as the Reed Solomon codes 
and this case has been dealt with in [47]. An alternate perspective using 
Reed-Muller codes is considered in [84]. 



Extending quantum BCH codes. It is not always possible to extend a 
stabilizer code, because the corresponding classical codes are required to be 
self-orthogonal. In this paragraph we will show that it is possible to extend 
narrow-sense BCH codes of certain lengths. 

Lemma 52. Let Fg2 be a finite field of characteristic p. If C is a narrow- 
sense [n,k, > d]g2 BCH code such that C"*-'' C C and n = —1 mod p, then 
there exists an [[n, 2k — n,> d]]g stabilizer code that is pure to d which can 
be extended to an [[n + 1, 2A; — n — 1, > d + 1]]^ stabilizer code that is pure 
to d+l. 



Proof. Since C'^'^ C C, Corollary 1191 implies the existence of an [[n, 2k — n,> 
d]]q quantum code that is pure to d. And being narrow-sense the parity check 
matrix of C has the form 



H 



(la 

1 a2 a2(2) 



V 1 a'^-i 



a 



a2(""i) 

{n-l)(d-l) 



(17) 
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where a is a primitive n root of unity. This can be extended to give an 
[n -\- l,k,d + 1] code Cg, whose parity check matrix is given as 





( 1 


1 


1 


1 1 \ 




1 


a 


a2 . 


a("-^) 


He = 


1 


o? 


a2(2) . 


• a2(n-i) 




\ 1 




a2(<i~i) . 





(18) 



We will show that C^^ is self-orthogonal. Let be the i row in Jif.- For 
2 < i < d the self-orthogonality of H implies that {Ri\Rj)h = 0. We need 
to show that = 0, 1 < i < For 2 < i < d we have = 

^^-gi a'^ = (a*" - l)/(a^ - 1) = 0, as a" = 1 and q' / 1. For i = 1 we have 
= n + 1 mod p, which vanishes because of the assumption n = — 1 

mod p. 

Now we will show that the rank of is d, thus Cg has a minimum 
distance of at least d + 1. Any d columns of He excluding the last column 
form a d X d vandermonde matrix which is nonsingular, indicating that the 
d columns are linearly independent. If we consider any set of d columns that 
includes the last column, we can find the determinant of the corresponding 
matrix by expanding by the last column. This gives usad— Ixd— 1 
vandermonde matrix with nonzero determinant. Thus any d columns of He 
are independent and the minimum distance of Cg is at least d+1. Therefore 
Ce is an [n + 1, A:, > d + l]g2 extended cyclic code such that C^'" C Cg. By 
Corollary El it defines an [[n + 1, 2A; — n — 1, > d + l]]g quantum code pure 
to d+1. □ 

Corollary 53. For all prime powers q, integers m > 1 and all 6 in the 

range 2 < (5 < — 1 there exists an 

[[q2m.^ q2m _ 3 _ ^^^^^^ _ _ y ^2^-^ ^ > 5 + ^J]^ 

stabilizer code pure to 5 + 1. 

Proof. The stabilizer codes from Theorem |^ are derived from primitive, 
narrow-sense BCH codes. If p denotes the characteristic of Fg2 , then g^*" — 
1 = — 1 modp, so the stabilizer codes given in Theorem!^ can be extended 
by Lemma EH □ 

A result similar to Lemma can be developed for BCH codes that 
contain their euclidean duals. 
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12 Puncturing Stabilizer Codes 



If we delete one coordinate in all codewords of a classical code, then we 
obtain a shorter code that is called the punctured code. In general, we 
cannot proceed in the same way with stabilizer codes, since the resulting 
matrices might not commute if we delete one or more tensor components. 

Rains [79] invented an interesting approach that solves the puncturing 
problem for linear stabilizer codes and, even better, gives a way to construct 
stabilizer codes from arbitrary linear codes. The idea is to associate with a 
classical linear code a so-called puncture code; if the puncture code contains 
a codeword of weight r, then a self-orthogonal code of length r exists and 
the minimum distance is the same or higher than that of the initial classical 
code. Further convenient criteria for puncture codes were given in [47]. 

In this section, we generalize puncturing to arbitrary stabilizer codes 
and review some known facts. Determining a puncture code is a challenging 
task, and we conclude this section by showing how to puncture quantum 
BCH codes. 

The Puncture Code. It will be convenient to denote the the pointwise 
product of two vectors u and v in by uv, that is, uv = {uiVi)'^^^. 

Suppose that C < F^" is an arbitrary additive code. The associated 
puncture code Ps(C') C F^ is defined as 

P,(C) = {(6fc4 - biakrk=i I {a\b), {a'\b') E C}^ . 

Theorem 54. Suppose that C is an arbitrary additive subcode of F^" of 
size \C\ = q"'/K such that swt(C^^ \ C) = d. If the puncture code Ps(C) 
contains a codeword of Hamming weight r, then there exists an {(r, K* , d*))q 
stabilizer code with K* > K/q'^~^ that has minimum distance d* > d when 
K* > 1. 7/swt(C-'-') = d, then the resulting punctured stabilizer code is 
pure to d. 

Proof. Let x be a codeword of weight r in the Ps(C). Define an additive 
code < F2" by 

= {{a\bx) I (a|6) G C}. 
If {a\bx) and {a'\b'x) are arbitrary elements of Cx, then 

{{a\bx) I {a'\b'x))s = tr {^Z^^ka'k - biak)xk^ = (19) 
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by definition of Ps{C); thus, < (C^)^^ 

Let = {(afc|6fc)fcg5|(a|6) G Cx} denote the restriction of Cx to the 
support S of the vector x. Since equation H19|) depends only on the nonzero 
coefficients of the vector x, it fohows that < (C^)-^" holds. 

We note that |C| > |C^|; hence, the dimension K* of the punctured 
quantum code is bounded by 

K* > q^/\C^\ > q^/\C\ = q'/iq^K) = K/q^-^ 

It remains to show that swt((C^)^'' \ C^) > d. Seeking a contradiction, 
we suppose that is a vector in {Cx)^" \ such that swt(n^) < d. Let 
Ux = (a|6) denote the vector in (Cx)'^'' that is zero outside the support of 
X and coincides with Ux when restricted to the support of x. It follows 
that {ax\b) is contained in C-^". However swt(arE|6) < d, so {ax\b) must 
be an element of C, since swt(C^'' \ C') = d. This implies that {ax\bx) 
is an element of Cx < (Cx)'^"- Arguing as before, it follows that {ax'^\bx) 
is in C and {ax'^\bx'^) is in Cx- Repeating the process, we obtain that 
Vx = (ax'^~^\bx'i~^) is in Cx, and we note that x'^"^ is the characteristic 
vector of the support of x. Restricting Vx in Cx to the support of x yields 
Ux S Cx, contradicting the assumption that Ux G (C^)^^ \ C^- 

Finally, the last statement concerning the purity is easy to prove (a direct 
generalization of the argument given in [47] for pure linear codes). □ 

If the code C is a direct product, as in the case of CSS codes, then the 
expression for the puncture code simplifies somewhat. 

Lemma 55. If Ci and C2 are two additive subcodes of , then 

P.(Ci xC2) = {ab\a£Ci,b£ Ca}^ < F^. 

Proof Since {ab \ a £ Ci,b £ C2) = {{ba' - b'a) | o, o' G Ci,b,b' G C2), the 
claim about the orthogonal complements of these sets is obvious. □ 

Since many quantum codes are constructed from self-orthogonal codes 
C < C"*-, we write shortly 

Pe{C) = Fs{C xC) = {ab\a,be C}^. (20) 

Puncturing BCH Codes. In this section, we let BCH™((5) denote a 
primitive, narrow-sense (?-ary BCH code of length n = q"^ — 1 and designed 
distance 6. We will illustrate the previous result by puncturing such BCH 
codes. Some knowledge about the puncture code is necessary for this task. 
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and we show in Theorem [27| that a cyclic generalized Reed-MuUer code is 
contained in the puncture code. 

First, let us recall some basic facts about cyclic generalized Reed-Muller 
codes, see [9, 10, 53, 75] for details. Let Lm(z/) denote the subspace of 
Fg[a;i, . . . , Xm] of polynomials of degree < and let {Pq, . . . , Pn-i) be an 
enumeration of the points in F™ where Pq = 0. The g-ary cyclic generalized 
Reed-Muller code m) of order and length n = g"^ — 1 is defined as 

TZl{u, m) = {ev f\f e Lm{iy)}, 

where the codewords are evaluations of the polynomials in all but Pq, ev f = 
(/(Pi), . . . , The dimension k*{u) of the code TZ*{i^,'m) is given 

by the formula k*{iy) = X^^q ("-'■)"' (7) ^v-Jq'^)^ minimum distance 

d*{u) = (i? + l)gQ-l, where m(g-l)-i/ = (g- + with < R<q-l. 
The dual code of 'R-*{i', m) can be characterized by 

7^;(z.,m)^ = {ev flfGLU'^^)}, (21) 

where = m{q — 1) — u — 1 and L^iy) is the subspace of all nonconstant 
polynomials in Lm{i')] 

It is well-known that a primitive, narrow-sense BCH code contains a 
cyclic generalized Reed-Muller code, see [53, Theorem 5], and we determine 
the largest such subcode in our next lemma. 

Lemma 56. We have n*{u, m) C BCH™(5) for v = {m - Q){q - I) - R, 
with Q = [logg(5 + 1)J and R = \{6 + l)/q'^~\ — 1. For all orders v' > v, we 
have n*{iy',m) ^ BCH^((5). 

Proof. First, we show that TZ*{i',m) C BCH™ ((5). Recall that the minimum 
distance d*{u) = {R + l)q'^ - 1, where m{q-l) -u = (g- 1)Q + P with < 
R<q-l. By [53, Theorem 5], we have Til{v,m) C BCH™((i? + l)g'3 - 1). 
Notice that (i?+l)g«-l = \{5+l)/q^^q^-l > 6, so BCH™((P+l)g'3-l) C 
BCH™((5). Therefore, n*{u,m) Q BCH^((5), as claimed. 

For the second claim, it suffices to show that TZ*{i' + l,m) is not a 
subcode of BCH™ (5). We will prove this by showing that the minimum 
distance d*{i' + 1) < 6. Notice that 

m(a-l)-(. + l) = / il-^)Q + R-^ fori?>l, 
^ ' \ {q-l){Q-l) + q-2 {orR = 0. 

with R and Q as given in the hypothesis. Therefore, the distance d*{iy + 1) 
of TZq{i^ + 1, m) is given by 



, ^^ _ / {\{S+l)/qQ]-l)qQ-l for i? > 1, 
^''+^> - \ (q- l)qQ-l -1 for ii = 0. 
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In both cases, it is straightforward to verify that d*{i' + 1) < 5. □ 

Exphcitly determining the puncture code is a challenging task. For the 
duals of BCH codes, we are able to determine large subcodes of the puncture 
code. 

Theorem 57. If 6 < gL™/2j _ i ^/^g^ 7e*(^,m) C Pe(BCH™(5)^) for all 
orders /x in the range < < m(q — 1) — 2(R + {q — ^)Q) + 1 with Q = 
Llog^(5 + 1)J and R=\{6 + - 1. 

Proof By Lemma 15^ we have TZ*{v,m) C BCH^((5) for v = {m - Q){q — 
1) - R; hence, BCH™(5)^ C 7^*(l/, m)^. It follows from the definition of the 
puncture code that Pe(BCH™(5)-L) 5 Pe(7^*(z^, m)-^). However, 

Pe(7^*(l/,m)^) = {evf-evg\f,geL*^{u^)}^, 

D {e^/|/GL;,(2l.^)}^ = 7^;((2z.^)^,m), 

where the last equality follows from equation (|21j) . This is meaningful only 
if (2i/^)^ > or, equivalents, if > {m{q - 1) - l)/2. Since S < gL™/2J _ 
it follows that Q < [m/2\ — 1, and the order satisfies 

ly = (m-Q){q-l)-R>\m/2 + l]{q-l)-R 
> \m/2]{q - I) + 1> {m{q- I)- l)/2, 

as required. Since Tl*{fi,m) C Tl*([2v^)-^,m) for < /x < (2i/^)^, we have 
7^*(M,m) CP,(BCH™(5)^). □ 

Unfortunately, the weight distribution of generalized cyclic Reed-Muller 
codes is not known, see [22]. However, we know that the puncture code 
of BCH^((5)-L contains the codes 7^*(0,m) C 7^*(l,m) C ... C n*{m{q - 
1) — 2{R + {q— l)Q) + 1, m), so it must contain codewords of the respective 
minimum distances. 

Corollary 58. If 6 and fi are integers in the range 2<S < gL™/2J _ 1 and 
< fi < m{q - 1) - 2{R + {q - 1)Q) + 1, where Q = [log^(5 + 1)J and 
R = \{6 + l)/?*^] — 1, then there exists a 

[[d*{fi), > d*{fi) - 2m\{5 - 1)(1 - l/q)] , > 6]]g 

stabilizer code of length d*{fi) = {p + l)q'^ — 1, where a and p satisfy the 
relations m{q — 1) — p, = [q— 1)(t + p and < p < q — 1. 
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Proof. If 2 < 5 < gL™y2j _ -|^^ then from Theorem ISU] we know that there 
exists an [[q"^ — l,q"^ — 1 — 2m\{5 — 1)(1 — !/(/)],> 6]]q quantum code. 
From Lemma EZl we know that Pe(BCH^(5)-L) D 7^*(/i,m), where < 
H < m{q - 1) - 2{q - 1)Q - 2R + 1. By Theorem IHH if there exists a 
vector of weight r in Pe(BCH^((5)-'"), the corresponding quantum code can 
be punctured to give [[r, > r — 2m\{5— 1)(1 — l/q)~\), d > SWq. The minimum 
distance of TZ*{^i,m) is d*{fi) = (p + l)q'^ — 1, where < p < q — 1 [53, 
Theorem 5]. Hence, it is always possible to puncture the quantum code to 
[[d*{ti), > - 2m\{6 - 1)(1 - 1/q)] , > 6]]g. □ 

It is also possible to puncture quantum codes constructed via classical 
codes self-orthogonal with respect to the hermitian inner product. Examples 
of such puncturing can be found in [47] and [84]. 



13 MDS Codes 

A quantum code that attains the quantum Singleton bound is called a quan- 
tum Maximum Distance Separable code or quantum MDS code for short. 
These codes have received much attention, but many aspects have not yet 
been explored in the quantum case (but see [47, 79] ) . In this section we will 
study the maximal length of MDS stabilizer codes. 

An interesting result concerning the purity of quantum MDS codes was 
derived by Rains [79, Theorem 2]: 

Lemma 59 (Rains). An [[n, A:,(i]]q quantum MDS code with k > 1 is pure 
up to n — d + 2. 

Corollary 60. All quantum MDS codes are pure. 

Proof. An [[n, /c, (i]]q quantum MDS code with /c = is pure by definition; 
if A; > 1 then it is pure up to n — d + 2. By the quantum Singleton bound 
n — 2d + 2 = k > 0; thus, n — d + 2 > d, which means that the code is 
pure. □ 

Lemma 61. For any [[n, n — 2d + 2, d]]q quantum MDS stabilizer code with 
n — 2d + 2 > the corresponding classical codes C C C^" are also MDS. 

Proof. If an [[n, n — 2d -\- 2,d]]q stabilizer code exists, then Theorem 
implies the existence of an additive [n,d — l]g2 code C such that C C C^". 
Corollarv l6Ul shows that C^" has minimum distance d, so C"*-" is an [n, n—d-'r 
1, d]q2 MDS code. By Lemma IS^ the minimum distance of C is > n — d + 2, 
so C is an [n, d — 1, n — d + 2]q2 MDS code. □ 
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A classical [n, k, d]q MDS code is said to be trivial if /c < 1 or A; > n — 1. 
A trivial MDS code can have arbitrary length, but a nontrivial one cannot. 
The next lemma is a straightforward generalization from linear to additive 
MDS codes. 

Lemma 62. Assume that there exists a classical additive {n^q^,d)q MDS 
code C . 

(i) If the code is trivial, then it can have arbitrary length. 

(ii) If the code is nontrivial, then its code parameters must he in the range 
2 < k < min{n — 2,q — 1} and n<q + k— l<2q — 2. 

Proof. The first statement is obvious. For (ii), we note that the weight 
distribution of the code C and its dual are related by the MacWilliams 
relations. The proof given in [67, p. 320-321] for linear codes applies without 
change, and one finds that the number of codewords of weight n — /c + 2 in 
C is given by 

An-k+2 = (^^'^^{q-l){q-n + k-l). 

Since An-k+2 must be a nonnegative number, we obtain the claim. □ 

We say that a quantum [[n, k, d]]q MDS code is trivial if and only if its 
minimum distance d < 2. The length of trivial quantum MDS codes is not 
bounded, but the length of nontrivial ones is, as the next lemma shows. 

Theorem 63 (Maximal Length of MDS Stabilizer Codes). A non- 
trivial [[n,k,d]]q MDS stabilizer code satisfies the following constraints: 

i) its length n is in the range A<n<q'^ + d — 2< 2q'^ — 2; 

ii) its minimum distance satisfies max{3, n — q^ + 2} < d < min{n— 1, q^}. 

Proof. By definition, a quantum MDS code attains the Singleton bound, so 
n — 2d + 2 = k > 0; hence, n > 2d — 2. Therefore, a nontrivial quantum 
MDS code satisfies n > 2d - 2 > 4. 

By Lemma IfiH the existence of an [[n,n — 2d + 2,d]]q stabilizer code 
implies the existence of classical MDS codes C and C^" with parameters 
[n,d—l,n — d + 2]q2 and [n,n — (i+l,d]g2, respectively. If the quantum code 
is a nontrivial MDS code, then the associated classical codes are nontrivial 
classical MDS codes. Indeed, for n > 4 the quantum Singleton bound implies 
d < (n + 2)/2 < (2n — 2)/2 = n — 1, so C is a nontrivial classical MDS code. 

By Lemma 1621 the dimension of C satisfies the constraints 2 < d — 1 < 
min{n — 2,q^ — 1}, or equivalently 3 < d < min{n — Similarly, the 

length n of C satisfies n < + {d - I) - I < 2q^ - 2. If we combine these 
inequalities then we get our claim. □ 
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Example 64. The length of a nontrivial binary MDS stabihzer code cannot 
exceed 2q^ — 2 = 6. In [19] the nontrivial MDS stabilizer codes for q = 2 were 
found to be [[5, 1, 3]]2 and [[6, 0, 4]]2, so there cannot exist further nontrivial 
MDS stabilizer codes. 

In [47], the question of the maximal length of MDS codes was raised. 
All MDS stabilizer codes provided in that reference had a length of or 
less; this prompted us to look at the following famous conjecture for classical 
codes (cf. [52, Theorem 7.4.5] or [67, pages 327-328]). 

MDS Conjecture. If there is a nontrivial [n, k]q MDS code, then n < g+1 
except when q is even and k = 3 or k = q — 1 in which case n < q + 2. 

If the MDS conjecture is true (and much supporting evidence is known), 
then we can improve upon the result of Theorem 1631 

Corollary 65. // the classical MDS conjecture holds, then there are no 
nontrivial MDS stabilizer codes of lengths exceeding + 1 except when q is 
even and d = 4 or d = q^ in which case n < q^ + 2. 



14 Quantum Character Codes 

A new family of codes was introduced in [32]. The codes of this family are 
defined using group characters. These codes are in many ways remarkably 
similar to binary Reed-Muller codes, but they are defined over nonbinary 
fields. Since these codes were introduced only recently and are not yet well- 
known, we will provide a little more background. In this section we derive 
quantum codes from group character codes using the CSS construction. 



Group character codes. Let G be an additive abelian group of order 
n and exponent m. Let Fg be a finite field such that gcd(n, q) = 1 and 
m \ q — 1. 

The set Hom(G, F*) of F^-valued characters of G consists of the ho- 
momorphisms from G into the multiplicative group F*. Our assumptions 
ensure that the set of characters forms a group that is isomorphic to G. We 
can index the characters by elements of the group G, 

Hom(G,F*) = {x.|xGG'}, 

such that xo denotes the trivial character, and x-x denotes the inverse of Xx- 
For any subset X of the group G, the character code Cx is defined as 

l^cax.(y) = OforaUyGxl. (22) 



Cx = <CGF" 



j=0 
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The code Cx is an [n,A;]ij code with n = \G\ and k = n — \X\. The parity 
check matrix Hx of the code Cx, with X = {xq, . . . , x^-k+i}, is given by 



Hx 



(^i) 



Xxiixo) 

XxA^i) 



\ Xxo{Xn—k—l) XxiiXji—k—l^ 

and its generator matrix Gx by 



Gx 



( Xxo{-Xn-k) XxA-Xn-k) 
Xxo{ — Xn-k+l) Xxi_{—Xn-k+l) 



Xx„_i(xo) \ 

Xx^-A^i) 

Xxr,-i{Xn~~k^l) J 



Xxr,-i{-Xn-k) \ 
Xx„_i { — Xn-k+l) 



\ Xxo{-Xn-l) Xxi{-Xn-l) ■■■ Xa;„_i (-a^n-l) / 

Indeed, the characters satisfy the weh-known orthogonahty relation 



X] Xx{v)Xx{ 
x&G 



n if y + z = 0, 
ify + z/0; 



(23) 



which imphes GxHJ^ = 0. 



Elementary abelian 2-groups. We now speciahze to the case of a finite 
elementary abelian 2-group G = Z^, m > 1. Let Fq be a finite field of odd 
characteristic; this choice ensures that 2 \ q — 1 and gcd(2"^,q) = 1. Recall 
that the characters of G are given by Xxiu) = (—1)^'^ for x,y in G. 
We define a 2-group character code Cg(r, m) by 

Cq{r, m) = Gx with X = {x e \ wt{x) > r}. 

It can be shown that Gq{r,m) is an [n, k{r), d{r)]q code, with 

k{r) = (j^^ and (i(r) = 2""^ (24) 

see [32, Lemma 4 and Theorem 6]. We need the following result about 
2-group character codes which is not explicitly proved in [32]. 

Lemma 66. If ri < r2, then Cq{ri,m) CCg(r2,m). 
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Proof. By equation H23|l the generator matrix of Cq{r, m) consists of vectors 
of the form 

{Xxo{Xi),Xxi(.Xi), - ■ ■ ,Xx„-i{^i)) = {Xxo{-Xi),XxA-Xi)r ■ ■ ,Xx„-^i(.-Xi)) 

where Xj is an element of Z™ of Hamming weight wt(xj) < r. Thus, the 
generator matrix of Cq (ri , m) is a submatrix of the generator matrix of 
Cg(r2,m), which shows that Cq{ri,ni) C Cq{r2,m). □ 

Lemma 67. The dual code Cq{r,m)^ is equivalent to Cq{m — r — l,m). 

Proof. See [32, Theorem 8]. □ 

Now we win construct a family of codes based on the CSS construction. 

Theorem 68. If < ri < r2 < m and q the power of an odd prime, then 
there exists an [[n,k{r2) — k{ri),miii{2''^~^'^ ,2^^^^}]]q quantum code, where 
n = 2"^ and k{r) is given by equation \24\j - 

Proof. If ri < r2 , then Ci = Cq (ri , m) C Cq (r2 , m) = C2 by Lemma 1661 
From the equations for the minimum distances given in 1)24(1 , we can see that 
wt(C2 \ Ci) = 2'^-'^2_ Similarly, it follows from Lemma EZI that wt(Ci^ \ 
C^) = wt(Cg(m - n - 1) \ Cq{m - r2 - 1)) = 2''i+i. By Lemma 1^ there 
exists an ^n,k{r2) — /c(ri), min{2™~''2, 2''i^~^}]]g stabilizer code, where the 
dimensions k{ri) and k{r2) are given by equation (|24() . □ 

We can get more quantum codes by puncturing, as we did in the case of 
BCH codes. However, only the weight distribution of Cg(l,m) is known, so 
at the moment we do not have enough information as to what codes might 
exist. 

15 Code Constructions 

Constructing good quantum codes is a difficult task. We need a quantum 
code for each parameter n and k in our tables. We collect in this section 
some simple facts about the construction of codes. Lemmas I69H7 1 1 show how 
to lengthen, shorten or reduce the dimension of the stabilizer code. 

Lemma 69. If an [[n,k,(I\\q stabilizer code exists for /c > 0, then there 
exists an impure [[n + stabilizer code. 
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n/k 


k-1 


k 


k + l 


n — 1 


d — 1 pure 

LcmmalTll 


d 


— 1 pure 

L/cmmal71l 


d — 1 pure 

Lemmal70( 


n 


d pure 

Lcmmal7ll 




d pure 






n + 1 


d impure 

LGmmal69l 


d impure 

Lemmal69( 





Table 1: The existence of a pure [[n, /c, stabilizer code implies the exis- 
tence of codes with other parameters. 

Proof. If an [[n,A;,(i]]g stabilizer code exists, then there exists an additive 
subcode C < F^" such that \C\ = C < and swt(C^- \C) = d. 

Define the additive code 

C' = {{aa\bO) \aeFg, {a\b) G F^"}. 

We have \C'\ = q^~k+^ . The definition ensures that C is self-orthogonal 
with respect to the trace-symplectic inner product. Indeed, two arbitrary 
elements (aa|W) and (a'a'|6'0) of C satisfy the orthogonality condition 

{{aa\bQ)\{a'a'\h'{)))s = {{a\b)\{a'\b')) s + iT{a ■ ^ - a' ■ ^) = 0. 

A vector in the trace-symplectic dual of C has to be of the form (aa|60) 
with (a|6) € C^" and a € Fg. Furthermore, 

swt(C7'^= \ C) = min{swt(aa|60) | a E Fg, a, 6 G \ C}, 

which coincides with swt(C"'"° \ C). Therefore, an [[n + 1, stabilizer 
code exists by Theorem [T^ li d> 1, then the code is impure, because C"-*-" 
contains the vector (Oa|00) of symplectic weight 1. □ 

Lemma 70. // a pure [[n, /c, stabilizer code exists with n > 2 and d > 2, 
then there exists a pure [[n — l,k + l,d — l]]q stabilizer code. 

Proof. If a pure [[n, k, d]]q stabilizer code exists, then there exists an additive 
code D < F^2 that is self-orthogonal with respect to the trace-alternating 
form, so that \D\ = q^~^ and wt(-D-'-'') = d. Let Dq"^ denote the code 
obtained by puncturing the first coordinate of D^°- . Since the minimum 
distance of D^°- is at least 2, we know that I-Dq""] = l^"*""! = (7"+'^, and we 
note that the minimum distance of -D^" is d — 1. The dual of L*^" consists 
of all vectors u in F"","^ such that Ou is contained in D. Furthermore, if u is 
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an element of Dq, then On is contained in D; hence, Dq is a self-orthogonal 
additive code. The code Dq is of size because 



dim Do + dim -Dq " ~ 



n-l 
2 



when we view Dq and its dual as Fp- vector spaces. It follows that there 
exists a pure [[n — l,k + l,d — l]]q stabilizer code. □ 

Lemma 71. If a (pure) [[n,k,d]]q stabilizer code exists, with k>2 (k >1), 
then there exists a (pure) [[n,k — l,d*]]q stabilizer code such that d* > d. 

Proof. If an /c, stabilizer code exists, then there exists an additive 
code D < F^2 such that D < D^'' with vjt{D^'' \ D) = d and \D\ = q""'^ . 

Choose an additive code D}) of size \Dii\ = such that D < Db < D-^"-. 

Since D < Db, we have D^" < L*^". The set T.b = D^" \ Db is a subset of 
\ D, hence the minimum weight d* of T,b is at least d. This proves the 
existence of an [[n,k — l,d*]] code. 

If the code is pure, then wt(L'^") = d; it follows from Z)^" < Z?-*-" that 
wt(-D^") > d, so the smaller code is pure as well. □ 

Corollary 72. // a pure [[n,k,d]]q stabilizer code with n > 2 and d > 2 
exists, then there exists a pure [[n — l,k,d — l]]q stabilizer code. 

Proof. Combine Lemmas 1701 and 1711 □ 

Lemma 73. Suppose that an {{n, K,d))q and an {{n' , K' ,d'))q stabilizer 
code exists. Then there exists an {(n + n' , KK' ,m.m(d,d'))q stabilizer code. 

Proof. Suppose that P and P' are the orthogonal projectors onto the stabi- 
lizer codes for the ((n, K, d))q and ((n', K', d'))q stabilizer codes, respectively. 
Then P (S> P' is an orthogonal projector onto a ETiT'-dimensional subspace 
Q* of C^, where d = . Let S and 5' respectively denote the stabilizer 
groups of the images of P and P'. Then S* = {E (g) E' \ E e S, E' £ S'} is 
the stabilizer group of Q*. 

If an element F F* of G„ G„/ = Gn+n' is not detectable, then F 
has to commute with all elements in 5, and F' has to commute with all 
elements in S' . It is not possible that both F G Z[Gn)S and F' € Z{Gn')S' 
hold, because this would imply that F ® F' \s detectable. Therefore, either 
F or F' is not detectable, which shows that the weight oi F ® F' is at least 
min((i,(i')- D 
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Lemma 74. Let Qi and Q2 be pure stabilizer codes that respectively have 
parameters [[n,ki,di]]q and [[n,k2,d2]]. If Q2 ^ Qi, then there exists a 
[[2n, ki+k2,d]]q pure stabilizer code with minimum distance d > min{2(i2, di}. 

Proof. The hypothesis imphes that there exist additive subcodes Di < D2 of 
F^2 such that Dm < D^", \Dm\ = q^'^"' , and wt(L>;^'') = dm for m = 1,2. 
The additive code 

D = {(n, u + v)\u(^Di,v(^ D2} < 

is of size \D\ = qi2"-(fci+fc2)^ The trace-alternating dual of the code D is 
L)^" = {(n' + v', v') I u' G D^"-,v' £ -D^"}. Indeed, the vectors on the right 
hand side are perpendicular to the vectors in D, because 

{{u, U + v)\{u' + v', v'))a = {u\u' + v')a + (u + v\v')a = 

holds for all u G Di , w G and u' £ D^" , v' G D^"- ■ We observe that D is 
self-orthogonal, D < D^". The weight of a vector {u' + v', v') G D-^°- \ D is 
at least min{2(i2, di}; the claim follows. □ 

Lemma 75. Let q be an even prime power. If a pure [[n, ki, di]]q stabilizer 
code Qi exists that has a pure subcode Q2 ^ Qi with parameters [[n,k2,d2]]q 
such that ki > k2, then a pure [[2n,A;i — /c2,(i]]g stabilizer code exists such 
that d > min {2di , ^2} . 

Proof. If an [[um, km., dm]]q stabilizer code exists, then there exists an addi- 
tive code Dm < F^2 such that Dm < Dm", wt(L'^'') = d, and \Dm\ = g'""'"™ 
for m = 1,2. The inclusion Q2 ^ Qi implies that Di < D2. Let D de- 
note the additive code consisting of vectors of the form (n, u + v) such that 
u G D^"- and v G Di. 

We claim that D^" consists of vectors of the form [u' , u' + v') such that 
u' G and v' £ D2. Indeed, let vi = {u,u + v) denote a vector in D, and 
let V2 = {u' , u' + v') be a vector with u' G -Dj^" and v' G D2. We have 

{Vl\v2)a = {u\u)a + (u|ti')a + {u\v')a + {v\u')a + {v\v')a. 

The first two terms on the right hand side cancel because the characteristic 
of the field is even; the next two terms vanish since the vectors belong to 
dual spaces; the last term vanishes because v and v' are both contained in 
D2, and D2 is self-orthogonal. Therefore, vi and V2 are orthogonal. The 
set {{u',u' + v') I u' G D^^^v' G D2} C has cardinality g2n+fci-fc2^ gg it 
must be equal to L*^" by a dimension argument. 

The Hamming weight of a vector {u' , u'+v') in is at least min {2di , ^2}, 
because u' G -Of" and v' £ D2 < D^" . □ 
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Lemma 76. Let q be a power of a prime. If an {{n, K,d))qm stabilizer 
code exists, then an {{nm, K,> d))q stabilizer code exists. Conversely, if an 
{{nm,K,d))q stabilizer code exists, then there exists an {{n,K, > [d/m\))qm 
stabilizer code. 

This lemma is implicitly contained in the paper by Ashikhmin and 
Knih [4]. 

Proof. Let B = . . . ,/3m} denote a basis of Fgm/Fg. A nondegenerate 
symmetric form on the Fg-vector space Fgm is given by tr^m /q{xy). It follows 
that the Gram matrix M = {t^qm iq{j3ij3j))i<i^j<rn is nonsingular. We have 
iVqmiq{xy) = eB{xYMeB{y) for all x,y in F^™. 

If a is an element of Fqm, then we denote by e_B(o) the coordinate vector 
in F^ given by eg (a) = (ai, . . . , am), where a = YlT^i O'iPi- We define an 
Fp~vector space isomorphism ipB from F^" onto F^""* by 

^B{{a\b)) = ((eB(ai), . . . , eB(a„))|(MeB(6i), . . . , MeB(6„))). 

It follows from the fact that tiqm /^{tT: q/p{x)) = tiqm/p{x) holds for all x in 
Fqm and the definition of the isomorphism ipB that {a\b) J-s {c\d) holds in 
F^m if and only if ipB{{a\b)) J-s ipB{{c\d)) holds in Fg2nm. 

If an {{n, K,d))qm exists, then there exists an additive code C < Fg" 
of size |C| = g"""/i^ such that C < swt(C-L= \ C) = d K > I, 

and swt(C^'') = d if K = 1. Therefore, the code ipB{C) over the al- 
phabet Yq is of size q^'^/K, satisfies ^b{C) < Vb{C)^' < F2""\ and 
swt(<^B(C)^= \ ipB{C)) = d a K > 1 and swt{ipB{C)^') = d if K = 1. 
Thus, an {{nm, K,d))q stabilizer code exists. 

The existence of an {{nm,K,d))q stabilizer code implies the existence of 
an {{nm, K))q stabilizer code; the claim about the minimum distance follows 
from the fact that (p'^ maps each nonzero block of m symbols to a nonzero 
symbol in F^m. □ 

We notice that if q is even or if q and m are both odd, then there exists a 
basis B such that M is the identity matrix; in that case, ipB simply expands 
each symbol into coordinates with respect to B. If g is odd and m is even, 
then no such basis exists. 

16 Conclusions and Open Problems 

We have further developed the theory of nonbinary stabilizer codes. In the 
first seven sections, we studied the basic theory of nonbinary stabilizer codes 
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over finite fields, and introduced Galois-theoretic methods to clarify the 
relation between these and more general quantum codes. In the remaining 
sections, we derived numerous families of quantum codes. Table |21 gives an 
overview and summarizes the main parameters of these families. 

We should emphasize that it is possible to start with a different choice 
of error basis [60], and one can develop a similar theory for such stabilizer 
codes. For example, one choice leads to self-orthogonal additive subcodes of 
Zq X instead of subcodes of x F^. It would be interesting to know 
how the stabilizer codes with respect to different error bases compare. 

One central theme in quantum error-correction is the construction of 
codes that have a large minimum distance. We were able to show that the 
length of an MDS stabilizer code over Fg cannot exceed + 1, except in a 
few sporadic cases, assuming that the classical MDS conjecture holds. An 
open problem is whether the length n of a q-ary quantum MDS code is 
bounded by + 1 for all but finitely many n. 

A number of researchers raised the question whether there exist degen- 
erate quantum codes that can exceed the quantum Hamming bound. Fol- 
lowing Gottesman's lead [40], we were able to show that single and double 
error-correcting nonbinary stabilizer codes cannot beat the quantum Ham- 
ming bound. We conjecture that no quantum error-correcting code can 
exceed the quantum Hamming bound, but a proof is still elusive. 

Finally, we briefly mention some of the topics that we have deliberately 
omitted. We decided not to include tables of the best known stabilizer codes, 
but rather make such tables available on the home page of the second author. 
We selected code families that are easily accessible by elementary methods; 
the interested reader can find examples of more intricate algebro-geometric 
constructions in [6,25,26,56,69] and of binary quantum LDPC codes in [21, 
65,76]. We did not include constructive aspects of encoding and decoding 
circuits, since encoding circuits are discussed in [49] and little is known about 
the decoding of stabilizer codes. We did not include combinatorial aspects, 
but Kim pointed out that there is a forthcoming book by Glynn, Gulliver, 
Maks, and Gupta that explores the relation between binary stabilizer codes 
and finite geometry. 
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Family 


[[n,k,d]]q 


Purity 


Parameter Ranges and References 


Short MDS 


[[n,n~2d + 2,d]]q 


pure 


2<d< rn/2l,92_i> 


Hermitian Hamming 


[[n, n — 2m, 3]]g 


pure 


771 > 2, gcd(77i,g2 _ 1) ^ 1^ „ = (q2m _ lyi^^i _ 


Euclidean Hamming 


[[n, n — 2to, 3]]g 


pure 


m > 2, gcd(777., g - 1) = 1, 77. = (g™ - l)/{q - 1) 


Quadratic Residue I 


[[n,l,d]]g 


pure 


n prime, 7i = 3 mod 4, q ^ mod 7?. 
g is a quadratic residue modulo n, d^ — d + 1 > n 


Quadratic Residue H 


[[n,l,d]]q 


pure 


n prime, n = 1 mod 4, g ^ mod n 
(7 is a quadratic residue modulo n, d > ^Jn 


Melas 


[[n, n — 4m, > 3]]g 


pure 


q even, n ~ q^"^ — 1, Pure to 3 


Euclidean BCH 
Punctured BCH 


[[n,n-2m\{6-^){l-l/q)^,>S]]q 
[[d*i^I), > d*{ii) - 2m\{5 - 1)(1 - l/g)J, > ,5]], 


pure 
to 6 
pure? 


2 < <5 < _ 1 _ (q _ 2)[r7i odd] 
77 = — 1 and m > 2 
S < qL"V2l _ 1^ See Corollary [SHI 


Hermitian BCH 
Extended BCH 


[[n,n-2m\{5-l){l-l/q')-\,>5]]q 
[[n + l,n - 2m\{5 - 1)(1 - l/g^)] - 1, > d + 1]], 


pure 
pure 


2 < (5 < - 1, 71 = g2m _ Pure to S 
Pure to 5 + 1 


Trivial MDS 


[[n,n- 2,2]], 

rr 1 11 


pure 
pure 


71 = mod p 
71 > 1 


Character 


[[n, k{r2) — k(ri), mm{2'" '2, 2'i^^|JJq 


pure 


n = 2™, q odd, < ri < 7'2 < 771, k{r) = 2^j=o ( 7 J 


CSS CRM 
Punctured CRM 


M^,k{v2) - k{vi),mm{d{v2),d{vt)]]]q 
0<vi<V2< m{q- 1) - 1 
> k{y2) - k{yi) - {n ~ d{^l)), > d]]q 


pure 
pure? 


m = e;=o(-i)^' (7) {"T-jr) , = - 1) - 7. - 1 

+ 1 = (g - 1)Q + R, d{v) = {R+ l)qQ 
d > min{d(i/2), rf(7/f ), < ^ < 7/2 - J^i; [84] 


Hermitian CRM 
Punctured CRM 


<iy < m{q- 1) - 1 
[[d{^Ji^),>d{|l^)-2k{y),>d{y^)% 


pure 
pure? 


: — T 

fc(^) = e;1o(-i)^(7)CT,7^'^ )' = - 1) - ^ - 1 

jy^ + 1 = (g2 _ 1)Q + Jl^ d{u) ^ {R + l)g2Q 

(zy + l)q <i^L< m{q^ - 1) - 1; [84] 


Punctured MDS 


[[q^ - qa, q^ - qa - 2v - 2,v + 2% 


pure 


0<7/<g-2, 0<a<g-7/-l; [84] 


Euclidean MDS 


[[n,n-2d + 2,d]]q 


pure 


3<7i<g, l<(i< 71/2+ 1; [49] 


Hermitian MDS 


[[q^ - s,q^ - s-2d + 2,d]]q 


pure 


1 < d < g,s = 0, 1; [49] 


Twisted 


[[q' + l,q'-iMq 


pure? 


[16] 


Extended Twisted 


[[g^g'■-r-2,3]], 
[[n,n-r- 2,3]], 


pure 
pure 


r > 2; [16] 

n = (q'-+2 - g3)/(q2 - 1), r > 1, r odd; [16] 


Perfect 


[[7i,n-r-2,3]]q 


pure 


71 = (^'■+2 - l)/(q2 - 1), r > 2, r even; [16] 



Table 2: A compilation of known families of quantum codes 
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